# Ubuntu – How does one remove a certificate authority’s certificate from a system

certificates

The ca-certificates package was just updated, and it caused the following changes on my Xubuntu 13.10 system:

Running hooks in /etc/ca-certificates/update.d....
Removing debian:cacert.org_class3.pem
Removing debian:cacert.org_root.pem
Removing debian:TC_TrustCenter_Universal_CA_III.pem


I've decided I don't trust some of these CAs, and I would like to remove their certificates. How do I do that?

• Run

sudo dpkg-reconfigure ca-certificates


That should give you a list where you can deselect CAs.

The list of CAs is stored in the file /etc/ca-certificates.conf. If you edit this file manually you need to run

sudo update-ca-certificates


to update the actual certificates in /etc/ssl/certs/ (if you use dpkg-reconfigure that is done automatically).

See /usr/share/doc/ca-certificates/README.Debian for more information.