I've lost my Windows XP instance (something broke so that I couldn't run a single program after startup, so I switched to Linux). I still have that partition, readable.

Now I need my StartSSL certificate. I remember I imported it to Outlook Express and Firefox in PKCS12 format. In which directory would I find the certificates on the disk?

Update: I have found /Documents and Settings/Administrator/Application Data/Mozilla/Firefox/Profiles/xxxxxxx.default/cert8.db
So I copied the profile dir and opened in Firefox, but the certificate is not there. So I have only Outlook left - I am 100% sure I imported the cert in.

  • 2
    Outlook Express uses the Windows certificate store, which stores things in C:\Documents and Settings\*<Username>*\Application Data\Microsoft\Crypto and C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto but that doesn't seem to be in an easily accessible format.
    – Patches
    Mar 25, 2011 at 4:35
  • up vote 0 down vote accept I found this: microsoft.com/resources/documentation/windows/xp/all/proddocs/… So it seems I'd have to install windows in VirtualBox and restore keys through Windows tools. Mar 25, 2011 at 6:13

1 Answer 1


Firefox uses the NSS database, which consists of cert8.db, key3.db, and secmod.db. All of these files are needed to recover a certificate.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.