Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Can we know the exact location of the certificate (DigiCert, Verisign, etc..)?

Right now the only way to check the certificate is by using the MMC application in System32 or in our web browser (Internet Explorer, Firefox, etc..) Internet options.

share|improve this question
add comment

4 Answers

up vote 8 down vote accepted

Windows' certificate store is (mostly) stored in the registry as outlined here. However, while IE, Chrome, Safari/iTunes, Outlook, etc. use Windows' certificate store, Firefox and Thunderbird use NSS' cross-platform certificate store. Opera also uses its own separate certificate store.

If you want to access Windows' certificate store, then you should use Microsoft's CryptoAPI. If you want to access the NSS certificate store, then you can use the NSS library.

share|improve this answer
add comment

There isn't any "folder" of certficates in Windows; it is stored in an internal database (Windows Registry) that you interface using the ways you listed in your original question. The easiest way to get to that database is just put certmgr.msc in your start/run box.


If you are really curious, you can find the actual registry entries under:

\SOFTWARE\Microsoft\SystemCertificates\

In HKEY_CURRENT_USER for user-specific certificates and HKEY_LOCAL_MACHINE for machine-specific certificates, But they will be un-readable binary blobs. It is just better to use the MMC snap-in I listed earlier.

share|improve this answer
add comment

The certificates are stored in the registry at

HKLM/Software/Microsoft/SystemCertificates

Personal certificates, or other certificates specific to the logged in user are at

HKCU/Software/Microsoft/SystemCertificates

They are stored as binary blobs, so they need to be decoded, and the MMC plugin is a good way to do this.

share|improve this answer
    
In my windows 7 x64 PC, the path is as follows:HKLM/Software/Microsoft/SystemCertificates and HKCU/Software/Microsoft/SystemCertificates. Note the missing System. –  Naai Sekar Aug 18 '13 at 7:15
    
@ashwin Hi ashwin - I have correct the answer. Please note, if you see that a correction is needed, you are welcome and encouraged to edit the post yourself. –  Paul Aug 18 '13 at 9:36
    
I am not a expert on this topic. I found my PC was different from the one mentioned and I was not sure if mine was exception or if it is the usual way. –  Naai Sekar Aug 18 '13 at 10:02
    
@ashwin Aah, great, I see. Thanks for the heads up on the error. –  Paul Aug 19 '13 at 0:24
add comment

I looked again at the group policy preference I was using. There is an option "Run in logged-on user's security context (user policy option)" that I enabled and now the registry entry is persisting

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.