REM delete a cert from the default .keystore keytool -delete -alias phony REM delete a cert from the cacerts file, password ( changeit ) keytool -delete -alias phony -keystore "J:\Program Files\java\jdk1.6.0_06\jre\lib\security\cacerts." REM list all .keystore certs keytool -list -v | more REM list all .keystore certs to a text file keytool -list -v > allmycerts.txt REM list just one .keystore cert keytool -list -v -alias mycert | more REM list all cacerts certificates ( password changeit ) keytool -list -keystore "J:\Program Files\java\jdk1.6.0_06\jre\lib\security\cacerts." | more REM list just one cacerts certificate ( password changeit ) keytool -list -keystore "J:\Program Files\java\jdk1.6.0_06\jre\lib\security\cacerts." -alias thatcert | more REM list display a standalone exported cert not inside .keystore or cacerts keytool -printcert -v -file anycert.cer | more