Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There is only a way to purge the whole certificate store (for SSL root certificates like those used for 802.1x).

Is there an app, setting or (as a last resort) command line to remove a single certificate?

(Android 2.2)

share|improve this question

migrated from Feb 24 '11 at 9:45

This question came from our site for computer enthusiasts and power users.

Related question: where are certificates stored in the Android OS? – Amanda Mar 22 '11 at 15:43
possible duplicate of How can I remove trusted CAs on Android? – Flow May 4 '12 at 11:48

To be honest I had never removed a cert before but I've added my own and it looks like it's the same process.

It's basically:

  • use Linux (or a vm of Linux)
  • install bouncycastle (java SSL library)
  • download the cacerts.bks files from the device
  • use keytool -delete command to remove the cert from cacerts.bks
  • verify that it worked with keytool
  • push the cacerts.bks file back up to the device

Bouncy Castle: Detailed instructions on how to use keytool:

In ubuntu it's a little easier to download through apt just so you can get the PATH stuff right. "apt-cache search bouncycastle" should help.

share|improve this answer

Since you're on 2.2, root your device, then use CACertMan:

Market Link Source Code

You can choose to delete certificates one-by-one, and back up your configuration for use later.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.