16
edits
Changes
→Listing All Non-Default Root Certificate Settings: include the 'sql:' part required for newer Mozilla products which have a cert9.db in SQLite format
Run this command (doing it while the Mozilla application is running is probably unsupported but does not seem to cause problems in practice):
Root certificates will have trust fields of <code>c</code>, indicating a disabled trust bit, or <code>CT</code> or <code>C</code>, indicating an enabled trust bit. For example: