please help?

Hello smart people. My husband's at work and isn't able to help me over the phone, and so he recommended that I ask you guys.

I noticed in Firefox, the section labeled "Manage CRLs", there's a long list of rather bizarre authorities and servers. The first name on the list is TurkTrust. I read that Mozilla had revoked this one, so I decided to delete it. Exited Firefox, then restarted. TurkTrust was back.

So, I'm curious.

1. Which of these certificates "need" to be on my computer?

2. Those that should be deleted, how do I really delete them, as obviously simply deleting them via the Manage CRLs area in Firefox isn't doing the job?

Thank you for any information, advice, assistance.

 

Welcome to Major Geeks!

In the many years I have used Firefox (since version 1.0) I have never ever looked at CRLs, even less tried to delete entries. Actually I do not quite understand why you are trying to delete entries from the revoked certificates list? You think some are there by mistake?

 

Thank you. It doesn't say that the certificates are revoked. It says "You have certificates on file that identify these certificate authorities." There's a long, long list.

Why are these certificates on my computer? Like, TurkTrust, DigiNotar, etc. And things we never use, such as Equifax, AOL, Wells Fargo, etc.

It's a bit unsettling, so I thought, as an experiment, I would delete the TurkTrust, since I had read that Mozilla has revoked that one. So I deleted it, exited, and restarted, only to discover that the TurkTrust certificate was back.

Thank you for your help and advice on this matter.

 

CRL means Revoked Certificates List; meaning these certificates are not to be trusted.

For more information see http://en.wikipedia.org/wiki/Revocation_list

 

Thank you.