Delete All Google Chrome Browser SSL Certificates? Good Idea, or Bad Idea? Why?

Jerry L
Jerry L used Ask the Experts™
on
Google Chrome Browser: 75.0.3770.142 (Official Build) (32-bit)
Windows OS (10 & 8.1)

BACKGROUND
The speed of loading web pages in my Google Chrome Browser had become slow. While looking through the advanced settings of the Google Chrome Browser, I clicked on the selection titled: "Manage Certificates". I noticed there are a large number of certificates.

QUESTION
(see Title of this post)
When, if ever, does it become (a) necessary or (b) advisable to remove (delete) one or more SSL certificates?
Is there a method that allows you to easily find "expired" certificates?
What would be the expected result if one were to remove ALL certificates? Could this cause problems, or would they simply reinstall themselves as needed, when those sites were visited again?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
I have the newest version of Chrome on Windows 10 and just ONE Certificate - Token Signing certificate.  I once signed a legal document with Chrome.

If you are connecting to a work site with SSL, you would need that certificate.   I use IPsec VPN

But you can get rid of certificates you do not need.
Fractional CTO
Distinguished Expert 2018
Commented:
You must be very careful about what exactly you delete.

1) The number of local cert storage has no effect on performance.

If you added up all these files, the sum small, compared to an image or audio or video.

2) If you delete the issuance chains (easier to do than you might think), this will result in you being prompted that every site you visit cannot be verified.

3) When, if ever, does it become (a) necessary or (b) advisable to remove (delete) one or more SSL certificates?

Never.

4) Is there a method that allows you to easily find "expired" certificates?

These are pruned automatically... or better said... Chrome will manage this process to ensure you can access sites.

See #2 above.

5) What would be the expected result if one were to remove ALL certificates?

See #2 above.

6) Could this cause problems, or would they simply reinstall themselves as needed, when those sites were visited again?

Depending on what you delete this may be true + may be false.

7) Tip: Better to open another question about Chrome being slow for you + work through improving your Chrome Performance.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
One thing you could do is delete Extensions - this is fine to do. Then uninstall Chrome, restart and install the newest version (V76). That often perks up performance.
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

Jerry LOperations Manager

Author

Commented:
David, thanks for the well-formed, comprehensive answers.

SUPPLEMENTAL QUESTION
There are at least 50, maybe 100 or more certificates. Is that something to be concerned about?

And yes, the issue of slow load times is a separate line of inquiry that I will address.

Thank you John, for chiming in with helpful suggestions. I have only a few well-targeted extensions, but I will explore that more closely.
JohnBusiness Consultant (Owner)
Most Valuable Expert 2012
Expert of the Year 2018

Commented:
please check out extensions as I suggested as these can affect performance
David FavorFractional CTO
Distinguished Expert 2018

Commented:
You're welcome!

SUPPLEMENTAL QUESTION
There are at least 50, maybe 100 or more certificates. Is that something to be concerned about?

No.

This is by design.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial