Modifying Certificate

To modifying a certificate’s trust attribute in internal token:

$ certutil -M -d nssdb -n testcert -t "CT,C,C"

To modifying a certificate’s trust attribute in HSM:

$ certutil -M -d nssdb -h HSM -f password.HSM -n HSM:testcert -t "CT,C,C"

This command modifies the trust attributes both in internal token and HSM. This command ignores the -f parameter, so the password must be entered manually

To rename a certificate:

• export the certificate into a file

• delete the certificate from NSS database

• reimport the certificate with a new nickname

See also NSS Bug 448738.