Take the 2-minute tour ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

There is only a way to purge the whole certificate store (for SSL root certificates like those used for 802.1x).

Is there an app, setting or (as a last resort) command line to remove a single certificate?

(Android 2.2)

share|improve this question

migrated from superuser.com Feb 24 '11 at 9:45

This question came from our site for computer enthusiasts and power users.

Related question: where are certificates stored in the Android OS? –  Amanda Mar 22 '11 at 15:43
possible duplicate of How can I remove trusted CAs on Android? –  Flow May 4 '12 at 11:48

2 Answers 2

To be honest I had never removed a cert before but I've added my own and it looks like it's the same process.

It's basically:

  • use Linux (or a vm of Linux)
  • install bouncycastle (java SSL library)
  • download the cacerts.bks files from the device
  • use keytool -delete command to remove the cert from cacerts.bks
  • verify that it worked with keytool
  • push the cacerts.bks file back up to the device

Bouncy Castle: http://www.bouncycastle.org/latest_releases.html Detailed instructions on how to use keytool: http://wiki.cacert.org/ImportRootCert#Android_Phones

In ubuntu it's a little easier to download through apt just so you can get the PATH stuff right. "apt-cache search bouncycastle" should help.

share|improve this answer

Since you're on 2.2, root your device, then use CACertMan:

Market Link Source Code

You can choose to delete certificates one-by-one, and back up your configuration for use later.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.