Deleting the DigiNotar CA certificate

Revision Information
  • Revision id: 16828
  • Created:
  • Creator: Michael Verdi
  • Comment: made the update message stronger, linked directly to the manual update steps
  • Reviewed: Yes
  • Reviewed:
  • Reviewed by: Verdi
  • Is approved? Yes
  • Is current revision? No
  • Ready for localization: Yes
  • Readied for localization:
  • Readied for localization by: Verdi
Revision Source
Revision Content

Mozilla has learned that a fraudulent SSL certificate for websites belonging to Google has been issued by DigiNotar. This is not a Firefox-specific issue and the certificate has now been canceled which should protect most people.

Mozilla has released an update to Firefox to further protect you. Please update as soon as possible by following the steps in the Updating Firefox article.

You can manually delete this certificate from any version of Firefox with these steps:

  1. In the Menu bar at the top of the screen, click Firefox and then select Preferences or Settings, depending on your macOS version.Click the menu button Fx89menuButton and select Settings.
  2. Click on the Advanced panel
  3. Select the Encryption tab
  4. Click View Certificates
  5. In the Certificate Manager window, select the Authorities tab
  6. Scroll down to DigiNotar and select the DigiNotar Root CA
  7. Click Delete or Distrust...
  8. Click OK to confirm
    • Because the certificate is "built-in" it will be distrusted but not deleted. Distrusting the certificate has the same effect as deleting it.

diginotar-win-1

diginotar-mac-1

diginotar-lin-1