Removing Certificates

Certificates can be removed from the certstore using the remove command. Specify the certificate you want to remove by using its label. Use the store option to refer to a specific certstore implementation. For instance, issue the following command (labels are case sensitive):

certtool –remove “TERoot”

You can remove keys from keystore. This option will work only if the key being removed was added to keystore using the command -private from certtool. To do this, you use the -rka option, as in the example below:

certtool -r abcd -rka

In this example, the key is removed as well as the certificate.