Where to find and remove certificates in Windows

Windows stores certificates in a central location called the Certificate Manager. To delete a certificate, you open Certificate Manager, find the certificate you want to remove, and delete it from there. The steps differ slightly depending on whether you are removing a certificate for your user account only or for the whole computer, but both routes use the same tool.

Most people delete certificates because they have expired, are no longer needed, or came from a source they no longer trust. Removing them does not break anything — Windows will straightforward stop using that certificate for whatever it was doing before.

Key Takeaways

  • Open Certificate Manager by typing certmgr.msc into the Windows search box and pressing Enter to access your personal certificates.
  • Navigate to the folder where your certificate is stored — usually "Personal" for certificates you installed yourself, or "Trusted Root Certification Authorities" for root certificates.
  • Right-click the certificate you want to remove and select Delete to remove it permanently.
  • Deleting a certificate does not affect other programs or Windows itself unless that certificate was actively being used for a specific task.
  • If you need to delete certificates for all users on the computer, use certlm.msc instead, which requires administrator rights.

How to delete your personal certificates

Personal certificates are the ones you installed for your own use. To delete one, press the Windows key and type certmgr.msc, then press Enter. This opens Certificate Manager for your user account.

On the left side, you will see a list of folders. Click the folder that contains the certificate you want to delete. Most personal certificates live in the "Personal" folder, but some may be in "Trusted Root Certification Authorities" or "Intermediate Certification Authorities" depending on what they are. Once you click the folder, the certificates inside appear in the middle pane.

Find the certificate you want to remove. You can look at the "Issued To" column to see who the certificate belongs to, or the "Expires" column to see when it stops being valid. Right-click the certificate and select Delete. A confirmation box will appear — click Yes to remove it permanently.

How to delete certificates for all users on your computer

If you need to remove a certificate that affects everyone who uses the computer, you must use the local machine certificate store instead of your personal one. Press the Windows key, type certlm.msc, and press Enter. Windows will ask for administrator permission — click Yes.

The layout is the same as the personal certificate manager, but this version shows certificates used by the whole computer. Navigate to the folder where the certificate is stored, right-click it, and select Delete. Confirm the deletion when prompted.

You need administrator rights to use certlm.msc. If you do not have them, you will see an error message. Contact whoever manages your computer if you need a certificate removed from the machine store.

What happens after you delete a certificate

Once a certificate is deleted, Windows stops using it. If a program or website was relying on that certificate, you may see a security warning or error the next time you try to use it. This is normal — it means the certificate is truly gone.

If you deleted a certificate by mistake, you can restore it by reinstalling it from wherever you got it originally. Most certificates come as files with names ending in .cer, .pfx, or .p7b. If you have the original file, you can double-click it and follow the prompts to install it again.

Certificates you should not delete

Windows comes with built-in certificates from major companies like Microsoft, Apple, Google, and others. These are in the "Trusted Root Certification Authorities" folder and are used to verify that websites and software are legitimate. Deleting them can break your ability to use certain websites or programs.

If you are not sure whether a certificate is safe to delete, look at who it was issued by. Certificates from well-known companies like DigiCert, Sectigo, or GlobalSign are usually important. Certificates you installed yourself or that came from a program you no longer use are usually safe to remove. When in doubt, search the certificate name online before deleting it.

Deleting expired certificates

Expired certificates are safe to delete — they are no longer valid anyway. To find them quickly, look at the "Expires" column in Certificate Manager. Any certificate with a date in the past is expired and can be removed without affecting anything.

Deleting expired certificates does not change how your computer works, but it does clean up the certificate store and make it easier to find the certificates that actually matter. You can delete as many expired certificates as you want without worry.

Frequently Asked Questions

Will deleting a certificate break my computer?

No. Deleting a certificate only affects programs or websites that were using that specific certificate. If nothing was using it, nothing changes. If something was using it, you will see an error the next time you try to use that program or website, but your computer itself will not break.

Can I undo a certificate deletion?

Yes, if you have the original certificate file. Look for files ending in .cer, .pfx, or .p7b on your computer or in your email. Double-click the file and follow the prompts to reinstall it. If you do not have the original file, you will need to get it from whoever issued the certificate.

What is the difference between certmgr.msc and certlm.msc?

Certmgr.msc shows certificates for your user account only. Certlm.msc shows certificates for the entire computer and requires administrator rights. Use certmgr.msc for your own certificates and certlm.msc if you need to manage certificates that affect all users.

Should I delete expired certificates?

Yes, it is safe and recommended. Expired certificates are no longer valid and serve no purpose. Deleting them cleans up your certificate store and makes it easier to find the certificates you actually need.

How do I know which certificates are safe to delete?

Certificates you installed yourself are safe to delete. Expired certificates are safe to delete. Certificates from programs you no longer use are safe to delete. Avoid deleting certificates from well-known companies in the "Trusted Root Certification Authorities" folder unless you are sure you do not need them.