We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Why are old security certificates listed in the certificate manager ?

  • 3 replies
  • 1 has this problem
  • 22 views
  • Last reply by Stefan Gies

Stefan Gies
Stefan Gies
more options

In the certificate manager of my firefox v43.0.3 are certificates listed like

DigiNotar Cyber CA Identity: DigiNotar Cyber CA Approved by: DigiNotar Cyber CA expired: 04.10.2011

MD5 Collisions Inc. (http://www.phreedom.org/md5) Identity: MD5 Collisions Inc. (http://www.phreedom.org/md5) Approved by: Equifax Secure Global eBusiness CA-1 expired: 02.09.2004

My question is now, why are there all those expired certificates ?

In the certificate manager of my firefox v43.0.3 are certificates listed like DigiNotar Cyber CA Identity: DigiNotar Cyber CA Approved by: DigiNotar Cyber CA expired: 04.10.2011 MD5 Collisions Inc. (http://www.phreedom.org/md5) Identity: MD5 Collisions Inc. (http://www.phreedom.org/md5) Approved by: Equifax Secure Global eBusiness CA-1 expired: 02.09.2004 My question is now, why are there all those expired certificates ?

All Replies (3)

guigs
guigs
more options

I don't know if they ever get deleted. Is it possible to remove them? Advanced panel - Accessibility, browsing, network, updates, and other advanced settings in Firefox

James
James
  • Top 25 Contributor
  • Moderator
more options

I remember the DigiNotar has been not trusted ever since Firefox 3.6.22 as it is a distrusted entries. http://website-archive.mozilla.org/www.mozilla.org/firefox_releasenotes/en-US/firefox/3.6.22/releasenotes/

Stefan Gies
Stefan Gies Question owner
more options

I tried to delete them. After a restart of the browser, the outdated certificates are back. The problem with the outdated certificates are also in the thunderbird mail client and seamonkey browser-suite!