Builtin Object Tokens are root certificates in the default Network Security Services (NSS) database as installed on the user's PC when when theythe user installed the software (e.g., Firefox) that uses them.
A BuiltIn Object Token will continue to be [a Builtin Object Token], even if the user changes the trust bits.
A Software Security Device can hold all kinds of certificates, not just root certificates.
For the Authorities list in the Certificate Manager, the certs that are labeled "Software Security Device" are root and intermediate certs that have been imported (e.g. not in the default list). The intermediate certs are often automatically imported, such as when you visit a website with an SSL cert signed by an intermediate CA.
|2||deleted 1 character in body|