All modern browsers/OS come with root certificates from the China Internet Network Information Center. AFAIK these certificates are required for computers sitting behind the Great Firewall to function properly.

Personally I don't live in China and I don't go to Chinese sites since I simply don't speak the language. Thus I don't see any benefit of having these certificates installed. The drawbacks are quite clear however, since China is known to have issued fraudulent Google certificates (1, 2). Is there any reason for me to keep CNNIC certificates on my computer? Could I experience problems with legitimate sites if I remove those?

1 Answer 1


If you don't use Chinese websites and internet-based products, you won't need to worry about removing them; you are unlikely to experience problems with legitimate websites by removing these dodgy certificates.

I used to live in China, and I never used any of CNNIC's certs outside of a virtual environment.

Legitimate browsers - Firefox and Chrome for example - are excluding these certificates as a result of fraud. Get rid of them.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .