1. Manual deletion: the user manually enters the certificate management tool in the operating system or application, finds the corresponding digital certificate, and selects the deletion option. This method is suitable for individual cases where a specific digital certificate needs to be deleted.
2. Reinstall the operating system: To completely empty all digital certificates installed on the computer, users may consider reinstalling the operating system, which will remove all existing digital certificates and restore them to their original state.
3. Apply for cancellation from a certification body: For digital certificates issued and managed by an accredited third-party certification body, users can submit an application to the accreditation body for cancellation of the relevant digital certificates. Once approved, the certification body will convey the corresponding information to major browsers and other related platforms, and mark the number on its trust list.
4. Digital signature revocation list: CRL is a list containing the serial numbers of all revoked digital signature files, that is, they will be deleted or expired. It is published by CA and updated regularly. When the digital signature certificate is revoked, its serial number will appear in the CRL. Applications can use CRL to check the status of digital certificates and delete or mark invalid digital certificates as needed.