“Secure traffic in Microsoft Windows...is not monitored” I have 5 KAV certificates. Why, and which one do I use with Mozilla apps?

[bobdd]

64-bit Windows 7 SP1, KAV 21.3.10.391 (g), Mozilla Thunderbird (TB) 91.4.1, ProtonMail Bridge for accessing email server, Mozilla Firefox (FF) 94.0.2

TB and FF seem to be working fine but KAV reports “Secure traffic in Microsoft Windows...is not monitored”. I’m following the instructions here to check the certificates. According to what this article tells me, both TB and FF are already configured to use system certificate storage (security.enterprise_roots.enabled is true). Regardless, I thought I’d also try importing the KAV certificate into TB and/or FF.

But when I open Control Panel > Internet Properties > Content > Certificates > Trusted Root Certification Authorities, I see 5 entries for “Kaspersky Anti-Virus Personal Root Certificate” with expiration dates ranging from 2022 to 2031. (FWIW My Kaspersky shows I’m paid until 2023.)

Can someone explain why I have 5 certificates? Do I need all of them? Should I delete the others? Which one do I choose to import into TB or FF? And finally, am I wasting my time because the source of the “Secure traffic...” KAV notice lies elsewhere?

[Berny]

@bobdd Welcome.

Please see the suggestion from @Schulte in this Topic

[harlan4096]

Also, keep the newer certificate and remove the old ones…

 

The cause is probably because different installations of previous Kaspersky versions...

[bobdd]

@Berny: Thanks. That fixed it. (FWIW I’d seen that thread previously, but it first recommends importing certificates into FF/TB which is where I got stuck. ☺ )

@harlan4096: How do I tell which certificate is the newest? That is, the latest start date, or the latest expiration date (or something else)?

[harlan4096]

The latest expiration.

 

You can remove them all and install again the last from Your current K. product :)

[bobdd]

OK. Thanks!