How to completely remove a certificate from Android: 3 working methods

Certificates Android are digital “identities” that confirm authenticity sites, applications or networks. They are automatically installed by the system (for example, for HTTPS connections) or added manually by the user - for example, for access to corporate mail, VPN or test versions of applications. However, over time, such certificates may become unnecessary, become outdated, or even pose a security risk if they were installed from untrusted sources.

Removing certificates for Android is a procedure that seems simple, but has nuances. For example, system certificates (those preinstalled by the manufacturer) cannot be deleted without root access, and user ones are sometimes “hidden” in non-obvious sections of the menu. In this article we will analyze all current methods for deleting certificates on modern versions of Android (including 14 and 15)and also explain why some methods may not work on your device.

Why delete certificates on Android?

Before moving on to the instructions, it is important to understand in which cases deleting certificates is justified. Here are the most common scenarios:

• 🔒 Security: The certificate was installed from an untrusted source (for example, through a phishing application) and can be used to intercept traffic.
• 🏢 Corporate policies: When changing jobs, you need to remove the old employer's certificates that restrict access to personal data.
• 📱 Connection errors: An outdated certificate prevents you from connecting to Wi-Fi, VPN or corporate services (errors like NET::ERR_CERT_AUTHORITY_INVALID).
• 🛠️ Application testing: Developers delete test certificates after debugging.

However, not all certificates can and should be deleted. For example, system root certificates (from Google, Let’s Encrypt etc.) provide a secure connection to most sites. Deleting them without root access is impossible - and this is correct, as it will lead to problems with Internet access.

⚠️ Attention: If you delete a certificate issued by your employer for access to corporate resources, you may lose access to mail, internal portals or VPN. Check with the IT department which certificates are critical for work.

Method 1: Removing the certificate through Android settings

The easiest method is to use the built-in tools of the system. It is suitable for user certificates (those that you installed yourself or through applications). is relevant for Android 10–15, but may differ slightly on devices from different manufacturers (Samsung, Xiaomi, Huawei etc.).

How to remove a certificate:

1. Open Settings → Security (on some devices Security and privacy).
2. Find the section Advanced or Certificate management (may be called Encryption and credentials).
3. Select Custom certificates (or Installed certificates).
4. In the list, find the required certificate and click on it.
5. Click Delete (or Revoke) and confirm the action.

If the section User certificates is empty, then all the certificates you installed have already been deleted or were never installed. System certificates are not displayed in this menu.

Method 2: Removal through “Account Settings” (for corporate certificates)

If the certificate was installed through corporate profile (for example, Microsoft Intune, VMware Workspace ONE or Google Workspace), it cannot be deleted through the standard menu. In this case, you need:

1. Go to Settings → Accounts (or Users and accounts).
2. Find the section Work profile or Managed profile (may be called differently depending on the MDM solution).
3. Tap on the profile and select Delete work profile.
4. Confirm deletion - this will delete all data and certificatesassociated with the profile.

After deleting the profile, all corporate applications and certificates will be reset. You may need to re-configure access to work resources.

⚠️ Attention: On some devices (especially those with Samsung Knox), deleting a work profile may require resetting the password or confirmation from the IT department administrator.

Method 3: Removing certificates via ADB (for advanced users)

If the certificate is not deleted through the settings or you want to clear system certificates (which requires root access), you can use ADB (Android Debug Bridge). The method is suitable for Android 8.0 and newer, but requires connecting the device to the computer.

Instructions:

1. Enable USB debugging in the developer settings (Settings → About phone → Tap on Number build7 times, then return to System → For developers).
2. Connect the phone to the PC and confirm permission to debug.
3. Open the command line (or Terminal on macOS/Linux) and enter:

adb shell pm list packages -f | grep -i "cert"

This command will list the packages associated with the certificates. You can then remove a specific certificate by its name (for example, com.android.cts.ctsshim):

adb shell pm uninstall -k --user 0 package_name

To remove all user certificates use:

adb shell pm uninstall -k --user 0 com.android.cts.ctsshim
adb shell pm clear com.android.cts.priv.ctsshim

Be careful: incorrect use ADB can lead to unstable system operation. If you are not sure of your actions, it is better to use other methods.

What to do if ADB does not see. device?

1. Check if ADB drivers are installed for your phone model.

2. Try another USB cable (preferably original).

3. Restart your phone and PC.

4. Enable the "Allow" option in the developer settings. USB debugging (safe mode). reason

What should I do if the certificate is not deleted?

Sometimes certificates get stuck in the system and are not removed using standard methods. Let's look at possible causes and solutions:

Problem	Possible reason	Solution
The “Delete” button is inactive	The certificate is protected by the MDM (corporate governance) policy	Delete the work profile or contact the IT department
The certificate disappears from the list, but errors remain	The browser or application cache saves the data	Clear the cache in Settings → Applications → Browser/Application → Memory → Clear cache
The certificate appears again after a reboot	The application or service automatically restores it	Delete or disable the problematic application
There is no “User Certificates” section	The manufacturer has hidden the menu (often u Xiaomi, Huawei)	Use ADB or search in the settings using the keyword “certificate”

If none of the methods helped, the last option remains - factory reset. This will delete all data from the device, including certificates, but you should only use it if absolutely necessary.

How to avoid problems with certificates in the future

To avoid having to delete certificates, follow these simple steps: rules:

• 🛡️ Install certificates only from trusted sources (for example, through official applications Google, Microsoft or your employer).
• 📱 Check the list of certificates in the settings regularly (once every 2-3 months).
• 🔍 Use security monitoring apps such as Google Play Protect or Malwarebytesthat warn about suspicious certificates.
• 📋 Keep a list of installed certificates (for example, in notes) so you know which ones can be safely removed.

If you frequently work with test or enterprise certificates, consider using a separate work profile on Android. This will isolate work data from personal data and simplify certificate management.

Common errors and how to fix them

When working with certificates, users often encounter common errors. Let's look at the most common ones:

• 🚫 Error NET::ERR_CERT_DATE_INVALID: The certificate has expired. Solution: Renew the certificate or delete it if it is no longer needed.
• 🔐 Error “Certificate is not trusted”: The certificate is self-signed or from an unknown authority. Solution - remove it or add it to browser exceptions (not recommended for security).
• 📵 You cannot delete the system certificate: This is normal - system certificates are protected. Solution - do not touch them if you are not sure of the consequences.
• 🔄 The certificate is restored after deletion: It is installed by an application or service. Solution - find and remove this application.

If you see a warning about the certificate when visiting a site, but did not install it manually, this may be a sign MITM attacks (traffic interception). In this case:

1. Immediately disconnect from the network (Wi-Fi or mobile data).
2. Check the list of certificates for suspicious ones.
3. Use a VPN or other network for diagnostics.

FAQ: Answers to frequently asked questions

Is it possible to delete a certificate without root access?

Yes, user certificates (those that you installed yourself) can be deleted without root access through the settings. However system certificates (pre-installed by the manufacturer) are deleted only with root access or through modified firmware.

What happens if you delete all user certificates?

In most cases, nothing critical will happen. However, if these included certificates for accessing corporate resources, VPNs, or secure Wi-Fi networks, you will lose access to these services. Some applications that relied on these certificates (for example, banking or work instant messengers) may also stop working.

How to find out which certificate is causing the error in the browser?

In Google Chrome or Mozilla Firefox click on the lock icon next to the site address → Certificate (or More). The name of the certificate and the organization that issued it will be indicated there. Compare this data with the list of certificates in the Android settings.

Is it possible to recover a deleted certificate?

If the certificate was installed via a file (for example, .crt or .p12), you can install it again if you saved a copy. Enterprise certificates are usually restored automatically when you reconnect to your work profile. System certificates are restored only after resetting the device or flashing it.

Why did some sites stop opening after deleting the certificate?

This means that the site used the deleted certificate to verify its authenticity. If this is a corporate resource, contact your IT department for a new certificate. If this is a public site (for example, a bank), perhaps the certificate was self-signed or outdated - try updating it or use the official application instead of the browser.