Looks like the correct process (works for me anyway) is to remove the certificate from the Root CA store by doing (as root): Code: cmcli -c common-ca -r 8868bfe08e35c43b386b62f7283b8481c80cd74d I found the ID for the certificate there using: Code: cmcli -T common-ca -L | grep DigiNotar You can then remove the certificate from the microb certificate store using the certificate manager as I suggested earlier.
cmcli -c common-ca -r 8868bfe08e35c43b386b62f7283b8481c80cd74d
cmcli -T common-ca -L | grep DigiNotar