listing built-in roots

dumproots.js

const { 'classes': Cc, 'interfaces': Ci } = Components;

let certdb = Cc["@mozilla.org/security/x509certdb;1"]
               .getService(Ci.nsIX509CertDB);
let certs = certdb.getCerts();
let enumerator = certs.getEnumerator();
while (enumerator.hasMoreElements()) {
  let cert = enumerator.getNext().QueryInterface(Ci.nsIX509Cert);
  let sslTrust = certdb.isCertTrusted(cert, Ci.nsIX509Cert.CA_CERT,
                                      Ci.nsIX509CertDB.TRUSTED_SSL);
  let emailTrust = certdb.isCertTrusted(cert, Ci.nsIX509Cert.CA_CERT,
                                        Ci.nsIX509CertDB.TRUSTED_EMAIL);
  let objsignTrust = certdb.isCertTrusted(cert, Ci.nsIX509Cert.CA_CERT,
                                          Ci.nsIX509CertDB.TRUSTED_OBJSIGN);
  dump("issuer: " + cert.issuerName + "\n");
  dump("serial: " + cert.serialNumber + "\n");
  dump("trust:\n");
  dump("  SSL:\t\t" + sslTrust + "\n");
  dump("  EMAIL:\t" + emailTrust + "\n");
  dump("  OBJSIGN:\t" + objsignTrust + "\n");
}