Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Default certificate database

  • 4 replies
  • 0 have this problem
  • 1 view
  • Last reply by Robb995

Robb995
Robb995
more options

My Firefox installation is several years old. As I peruse the Certificate database there are some that I have concerns about, however I have no way of knowing whether they are part of Firefox's default certificate database or were somehow added later. So, two (2) questions.

1. How can I replace the current certificate database with Firefox's current default database?

2. Is there somewhere a list of what certificate authorities are included in the default database?

Thank you in advance.

My Firefox installation is several years old. As I peruse the Certificate database there are some that I have concerns about, however I have no way of knowing whether they are part of Firefox's default certificate database or were somehow added later. So, two (2) questions. 1. How can I replace the current certificate database with Firefox's current default database? 2. Is there somewhere a list of what certificate authorities are included in the default database? Thank you in advance.

All Replies (4)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can rename/remove cert9.db in the Firefox profile folder to reset all changes made to certificates.

Closest for a list of built-in root certificates is probably this file:

Robb995
Robb995 Question owner
more options

I'll give it a try. Thank you for the quick response!

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

If you have a cert_override.txt, remove this file as well.

Robb995
Robb995 Question owner
more options

I have the file, but the only thing in it is:

  1. PSM Certificate Override Settings file
  2. This is a generated file! Do not edit.