After removing the diginotar .pem the wrong way (rm /etc/certs/common-ca/8868bfe...) I want to have it restored so I can remove it the proper way (cmcli), if I bother. My common-ca is now broken in a way that modest is crashing whenever it finds a network (battery hog too) and https spins in microb...

I tried reinstall (apt-get install --reinstall maemosec-certman-common-ca) but that was clearly not enough. (Maybe the diginotar cert has been removed from the package? looks like juhanima is working on it.)

Any ways to grab the missing .pem from somewhere else? (running plain 20.2010.36-2)

Thanks in advance.

found the .pem as plain text in the sources and just copied it back. modest and microb is back on track.

To update my certs I just copied the key3.db and cert8.db files from a desktop Firefox installation. Won't this replace the entire cert list?

https://www.mozilla.org/projects/sec.../certutil.html

Not sure if that is the same thing.
I was referring to the "system" certificates located in /etc/certs/common-ca. When I manually deleted the Diginotar cert (using rm), I got problems with modest (email) and the browser microb (https).

Oh I was talking about MicroB's certs, never mind.

BTW I deleted the diginotar cert using cmcli, I could zip up and upload the files you need if you wish. I still have the .pem for the Digitnotar cert on my backup server.