Why are fraudulent/fake certificates from DIGINOTAR and USERTRUST are still there in Firefox?
While going through the certificates install in my firefox browser, it was observed that in the section servers fake certificates from Diginotar and other authorities are still active. Does not firefox update certificate revocation lists.
Todas as respostas (1)
https://support.mozilla.org/en-US/questions/975404 Those are permanent block exceptions and shouldn't be removed. You can see that if you click the Edit button, so just leave them.
https://support.mozilla.org/en-US/questions/961004 There shouldn't be any DigiNotar certificates present under the Authorities tab in the Certificate Manager, but there should be permanent block entries under the Servers tab.
Modificado por James a