diff --git a/README.md b/README.md
index 2ce472574568063a1f63b5cfcaf2eb35cbdadcac..234d77f122b1956dffc8dbf97a67d3c62a97ae46 100644
--- a/README.md
+++ b/README.md
@@ -3,12 +3,15 @@
 Anti China Certifications.
 
 ### 版本
-Last updated on **2014-09-07**
+Last updated on **2014-09-08**
 
 ### 使用方法
 * Windows(System)
-    * Base 版本**以管理员身份运行** AntiChinaCerts(Base).bat
-    * Extended 版本**以管理员身份运行** AntiChinaCerts(Extended).bat
+    * Base 版本 **以管理员身份运行** AntiChinaCerts_Base.bat
+    * Extended 版本 **以管理员身份运行** AntiChinaCerts_Extended.bat
+* Windows(Firefox)
+    * `工具` - `选项` - `高级` - `证书` - `查看证书`
+	* 点击需要禁用的证书，直接点击 `删除或不信任` 按钮即可
 * Android
     * `设置` - `安全` - `受信任的凭据(显示受信任的CA证书)`
 	* 点击需要禁用的证书并下拉到最下面，点击 `禁用` 即可
@@ -18,22 +21,33 @@ Last updated on **2014-09-07**
     * 本工具作用是先将列表中的CA根证书删掉，然后再将这些证书添加到CRL证书吊销列表中，CRL证书吊销列表中的证书才会被彻底禁用
     * Extended 版本为 Base 版本扩展，添加另外几个CA根证书
     * 使用前可使用 Microsoft_Fixit_20135.diagcab(Win7以及之后) 或者 Microsoft_Fixit_51014.msi(Vista以及之前) 重置证书列表，**不过大多数情况下并不需要**
-    * 使用前 **强烈建议以管理员身份运行自带的RootSUPD** 更新系统的证书列表
+    * 使用前 **强烈建议以管理员身份运行自带的 RootSUPD** 更新系统的证书列表
+* Windows(Firefox)
+    * 最新 32 版本自带有 CNNIC ROOT 以及 China Internet Network Information Center EV Certificates Root
 * Android
     * 最新 4.4.4 系统自带有 CNNIC ROOT 以及 China Internet Network Information Center EV Certificates Root
-	* 其它并不随系统附带
 
 ### 注意
 * Windows(System)
-    * **将CA根证书直接删掉是没有任何作用的，下次访问使用该证书的网站时系统又会重新自动联网添加！**
-    * **因为每个用户使用的证书列表都是独立的，所以需要所有用户都运行一次才能彻底禁用这些证书！**
-    * 运行时如果遇到 `Error: Can not find a certificate matching the hash value` 不需要在意，只要后面 `CertMgr Succeeded` 运行成功就行，如果提示错误请检查是否是以管理员权限运行。或者联系作者
+    * **将CA根证书直接删除没有任何作用，下次访问使用该证书的网站时系统又会重新自动联网添加**
+    * **由于每个用户使用独立的证书列表，所以需要所有用户都运行一次本工具才能彻底禁用**
+    * 运行时如果遇到 `Error: Can not find a certificate matching the hash value` 不需要在意，只要后面 `CertMgr Succeeded` 运行成功就行，如果提示错误请检查是否是以管理员权限运行或联系作者寻求帮助
+	* 运行完毕建议清空所有浏览器数据以及系统SSL缓存
+* Windows(Firefox)
+	* 在 Firefox 里对自带根证书执行 `删除或不信任` 操作就相当于是禁用其所有目的，并不会将根证书本身删除
 * Android
     * Android 上由于没有提供比较方便的方法编辑CRL列表，所以证书并不能被完全禁用，Apps可以通过忽略证书错误继续使用
     * Android 系统没有自带的CA根证书默认为不信任状态，所以不需要手动添加到系统中
+	* 操作完毕建议清空所有浏览器数据和系统缓存，并重启网络连接
 
 ### 涉及的CA根证书
 * Base 版本
+    * Fake GitHub.Com(2013-01-25)
+	    * SHA-1 指纹 ‎27A29C3A8B3261770E8B59448557DC9E9339E68C
+		* 此伪造证书被用于 2013-01-25 大规模中间人攻击 GitHub 网站
+	* Fake Google.Com(2014-07-24)
+	    * SHA-1 指纹 ‎F6BEADB9BC02E0A152D71C318739CDECFC1C085D
+		* 此伪造证书被用于 2014-09-01 大规模中间人攻击 Google 网站
     * CNNIC ROOT
         * SHA-1 指纹 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F
         * 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn)
@@ -42,9 +56,9 @@ Last updated on **2014-09-07**
         * SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E
         * 所属机构为 [China Internet Network Information Center/CNNIC/中国互联网络信息中心](http://www.cnnic.net.cn)
         * [测试网址](https://evdemo.cnnic.cn)
-* Extended 版本
+* Extended 版本扩展
     * ROOTCA
-        * SHA-1 指纹 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E
+        * SHA-1 指纹 ‎DBB84423C928ABE889D0E368FC3191D151DDB1AB
         * 所属机构为 [Office of the State Commercial Cryptography Administration/OSCCA/国家商用密码管理办公室](http://www.oscca.gov.cn)
         * 测试：打开 Certs 目录中 CFCA_CS_SM2_OCA11 证书，该证书由 ROOTCA 交叉签署认证
     * CFCA GT CA
@@ -65,7 +79,7 @@ Last updated on **2014-09-07**
     * UCA EV Root
         * SHA-1 指纹 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E
         * 所属机构为 [Shanghai Electronic Certificate Authority Center/SHECA/上海市数字证书认证中心](http://www.sheca.com)
-* 观察中的CA根证书（**这些证书没有被工具禁用**）
+* 观察中（**并无被本工具禁用**）
     * SRCA
         * 本证书由其自行颁发，没有经过任何符合国际标准的国际事务所进行审计
 		* SHA-1 指纹 ‎AE3F2E66D48FC6BD1DF131E89D768D505DF14302
diff --git a/Windows/System/AntiChinaCerts(Base).bat b/Windows/System/AntiChinaCerts(Base).bat
deleted file mode 100644
index 473a11d2fe8ddeabbd3e33deeba1a852ffb3d2e9..0000000000000000000000000000000000000000
--- a/Windows/System/AntiChinaCerts(Base).bat
+++ /dev/null
@@ -1,34 +0,0 @@
-:: AntiChinaCerts Base batch
-:: Anti China Certifications.
-:: 
-:: Author: Chengr28
-:: 
-
-@echo off
-
-:: Permission check
-if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
-rd "%SystemPath%\test_permissions" > nul 2 > nul
-md "%SystemPath%\test_permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
-rd "%SystemPath%\test_permissions" > nul 2 > nul
-cls
-
-:: Delete certifications(Base)
-cd /d %~dp0/Certs
-::  CNNIC ROOT
-certmgr /del /c /sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F /s Root
-::  China Internet Network Information Center EV Certificates Root
-certmgr /del /c /sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E /s Root
-
-@echo.
-
-:: Add certifications to CRL.
-::  Base
-certmgr /add /c CNNIC_ROOT.cer /s Disallowed
-certmgr /add /c China_Internet_Network_Information_Center_EV_Certificates_Root.cer /s Disallowed
-
-:: Print to screen.
-@echo.
-@echo Done. Please confirm the messages on screen.
-@echo.
-@pause
diff --git a/Windows/System/AntiChinaCerts(Extended).bat b/Windows/System/AntiChinaCerts(Extended).bat
deleted file mode 100644
index 88ebc88e30ed8470050a522108a64195c70c59db..0000000000000000000000000000000000000000
--- a/Windows/System/AntiChinaCerts(Extended).bat
+++ /dev/null
@@ -1,54 +0,0 @@
-:: AntiChinaCerts Extended batch
-:: Anti China Certifications.
-:: 
-:: Author: Chengr28
-:: 
-
-@echo off
-
-:: Permission check
-if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
-rd "%SystemPath%\test_permissions" > nul 2 > nul
-md "%SystemPath%\test_permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
-rd "%SystemPath%\test_permissions" > nul 2 > nul
-cls
-
-:: Delete certifications(Base)
-cd /d %~dp0/Certs
-::  CNNIC ROOT
-certmgr /del /c /sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F /s Root
-::  China Internet Network Information Center EV Certificates Root
-certmgr /del /c /sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E /s Root
-:: Delete certs(Extended)
-::  ROOTCA
-certmgr /del /c /sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB /s Root
-::  CFCA GT CA
-certmgr /del /c /sha1 EABDA240440ABBD694930A01D09764C6C2D77966 /s Root
-::  CFCA EV ROOT
-certmgr /del /c /sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 /s Root
-::  UCA Global Root
-certmgr /del /c /sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF /s Root
-::  UCA Root
-certmgr /del /c /sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 /s Root
-::  UCA EV Root
-certmgr /del /c /sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E /s Root
-
-@echo.
-
-:: Add certifications to CRL.
-::  Base
-certmgr /add /c CNNIC_ROOT.cer /s Disallowed
-certmgr /add /c China_Internet_Network_Information_Center_EV_Certificates_Root.cer /s Disallowed
-::  Extended
-certmgr /add /c ROOTCA.cer /s Disallowed
-certmgr /add /c CFCA_GT_CA.cer /s Disallowed
-certmgr /add /c CFCA_EV_ROOT.cer /s Disallowed
-certmgr /add /c UCA_Global_Root.cer /s Disallowed
-certmgr /add /c UCA_Root.cer /s Disallowed
-certmgr /add /c UCA_EV_Root.cer /s Disallowed
-
-:: Print to screen.
-@echo.
-@echo Done. Please confirm the messages on screen.
-@echo.
-@pause
diff --git a/Windows/System/AntiChinaCerts_Base.bat b/Windows/System/AntiChinaCerts_Base.bat
new file mode 100644
index 0000000000000000000000000000000000000000..8bdda02646182a2b8f1ef7502b03b1008ba32fa1
--- /dev/null
+++ b/Windows/System/AntiChinaCerts_Base.bat
@@ -0,0 +1,77 @@
+:: AntiChinaCerts Base batch
+:: Anti China Certifications.
+:: 
+:: Author: Chengr28
+:: 
+
+@echo off
+
+:: Permission check
+if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
+::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
+::md "%SystemPath%\Test_Permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
+::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
+del /f /q %SystemPath%\TestPermission.log
+echo "Permission check." >> %SystemPath%\TestPermission.log
+if not exist %SystemPath%\TestPermission.log (echo Require Administrator Permission. && pause > nul && Exit)
+del /f /q %SystemPath%\TestPermission.log
+
+cls
+cd /d %~dp0\Certs
+
+:: Architecture check
+if "%PROCESSOR_ARCHITECTURE%%PROCESSOR_ARCHITEW6432%" == "x86" (goto X86) else goto X64
+
+:X86
+:: Delete certifications(Base)
+::  Fake GitHub.Com(2013-01-25)
+CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
+::  Fake Google.Com(2014-07-24)
+CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
+::  CNNIC ROOT
+CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
+::  China Internet Network Information Center EV Certificates Root
+CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
+
+@echo.
+
+:: Add certifications to CRL(Base)
+CertMgr_x86 -add -c FakeGitHubCom_2013_01.cer -s Disallowed
+CertMgr_x86 -add -c FakeGoogleCom_2014_07.cer -s Disallowed
+CertMgr_x86 -add -c CNNIC_ROOT.cer -s Disallowed
+CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
+goto Exit
+
+:X64
+:: Delete certifications(Base)
+:: Fake GitHub.Com(2013-01-25)
+CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
+CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
+:: Fake Google.Com(2014-07-24)
+CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
+CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
+::  CNNIC ROOT
+CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
+CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
+::  China Internet Network Information Center EV Certificates Root
+CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
+CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
+
+@echo.
+
+:: Add certifications to CRL(Base)
+CertMgr -add -c FakeGitHubCom_2013_01.cer -s Disallowed
+CertMgr -add -c FakeGoogleCom_2014_07.cer -s Disallowed
+CertMgr -add -c CNNIC_ROOT.cer -s Disallowed
+CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
+
+:Exit
+:: Print to screen.
+@echo.
+@echo Done. Please confirm the messages on screen.
+@echo.
+@pause
diff --git a/Windows/System/AntiChinaCerts_Extended.bat b/Windows/System/AntiChinaCerts_Extended.bat
new file mode 100644
index 0000000000000000000000000000000000000000..35dc94071e9f099257424b21fec57da49ebc7ed4
--- /dev/null
+++ b/Windows/System/AntiChinaCerts_Extended.bat
@@ -0,0 +1,129 @@
+:: AntiChinaCerts Extended batch
+:: Anti China Certifications.
+:: 
+:: Author: Chengr28
+:: 
+
+@echo off
+
+:: Permission check
+if "%PROCESSOR_ARCHITECTURE%" == "AMD64" (set SystemPath = %SystemRoot%\SysWOW64) else (set SystemPath = %SystemRoot%\system32)
+::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
+::md "%SystemPath%\Test_Permissions" 2 > nul || (echo Require Administrator Permission. && pause > nul && Exit)
+::rd "%SystemPath%\Test_Permissions" > nul 2 > nul
+del /f /q %SystemPath%\TestPermission.log
+echo "Permission check." >> %SystemPath%\TestPermission.log
+if not exist %SystemPath%\TestPermission.log (echo Require Administrator Permission. && pause > nul && Exit)
+del /f /q %SystemPath%\TestPermission.log
+
+cls
+cd /d %~dp0\Certs
+
+:: Architecture check
+if "%PROCESSOR_ARCHITECTURE%%PROCESSOR_ARCHITEW6432%" == "x86" (goto X86) else goto X64
+
+:X86
+:: Delete certifications(Base)
+::  Fake GitHub.Com(2013-01-25)
+CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
+::  Fake Google.Com(2014-07-24)
+CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
+::  CNNIC ROOT
+CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
+::  China Internet Network Information Center EV Certificates Root
+CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
+:: Delete certifications(Extended)
+::  ROOTCA
+CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot
+::  CFCA GT CA
+CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot
+::  CFCA EV ROOT
+CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot
+::  UCA Global Root
+CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
+::  UCA Root
+CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
+::  UCA EV Root
+CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
+CertMgr_x86 -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
+
+@echo.
+
+:: Add certifications to CRL(Base)
+CertMgr_x86 -add -c FakeGitHubCom_2013_01.cer -s Disallowed
+CertMgr_x86 -add -c FakeGoogleCom_2014_07.cer -s Disallowed
+CertMgr_x86 -add -c CNNIC_ROOT.cer -s Disallowed
+CertMgr_x86 -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
+:: Add certifications to CRL(Extended)
+CertMgr_x86 -add -c ROOTCA.cer -s Disallowed
+CertMgr_x86 -add -c CFCA_GT_CA.cer -s Disallowed
+CertMgr_x86 -add -c CFCA_EV_ROOT.cer -s Disallowed
+CertMgr_x86 -add -c UCA_Global_Root.cer -s Disallowed
+CertMgr_x86 -add -c UCA_Root.cer -s Disallowed
+CertMgr_x86 -add -c UCA_EV_Root.cer -s Disallowed
+goto Exit
+
+:X64
+:: Delete certifications(Base)
+:: Fake GitHub.Com(2013-01-25)
+CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine Root
+CertMgr -del -c -sha1 27A29C3A8B3261770E8B59448557DC9E9339E68C -s -r localMachine AuthRoot
+:: Fake Google.Com(2014-07-24)
+CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine Root
+CertMgr -del -c -sha1 F6BEADB9BC02E0A152D71C318739CDECFC1C085D -s -r localMachine AuthRoot
+::  CNNIC ROOT
+CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine Root
+CertMgr -del -c -sha1 8BAF4C9B1DF02A92F7DA128EB91BACF498604B6F -s -r localMachine AuthRoot
+::  China Internet Network Information Center EV Certificates Root
+CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine Root
+CertMgr -del -c -sha1 4F99AA93FB2BD13726A1994ACE7FF005F2935D1E -s -r localMachine AuthRoot
+:: Delete certifications(Extended)
+::  ROOTCA
+CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine Root
+CertMgr -del -c -sha1 DBB84423C928ABE889D0E368FC3191D151DDB1AB -s -r localMachine AuthRoot
+::  CFCA GT CA
+CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine Root
+CertMgr -del -c -sha1 EABDA240440ABBD694930A01D09764C6C2D77966 -s -r localMachine AuthRoot
+::  CFCA EV ROOT
+CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine Root
+CertMgr -del -c -sha1 E2B8294B5584AB6B58C290466CAC3FB8398F8483 -s -r localMachine AuthRoot
+::  UCA Global Root
+CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine Root
+CertMgr -del -c -sha1 0B972C9EA6E7CC58D93B20BF71EC412E7209FABF -s -r localMachine AuthRoot
+::  UCA Root
+CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine Root
+CertMgr -del -c -sha1 8250BED5A214433A66377CBC10EF83F669DA3A67 -s -r localMachine AuthRoot
+::  UCA EV Root
+CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine Root
+CertMgr -del -c -sha1 B9C9F58B3BBEF575E2B58328770E7B0076C40B5E -s -r localMachine AuthRoot
+
+@echo.
+
+:: Add certifications to CRL(Base)
+CertMgr -add -c FakeGitHubCom_2013_01.cer -s Disallowed
+CertMgr -add -c FakeGoogleCom_2014_07.cer -s Disallowed
+CertMgr -add -c CNNIC_ROOT.cer -s Disallowed
+CertMgr -add -c China_Internet_Network_Information_Center_EV_Certificates_Root.cer -s Disallowed
+:: Add certifications to CRL(Extended)
+CertMgr -add -c ROOTCA.cer -s Disallowed
+CertMgr -add -c CFCA_GT_CA.cer -s Disallowed
+CertMgr -add -c CFCA_EV_ROOT.cer -s Disallowed
+CertMgr -add -c UCA_Global_Root.cer -s Disallowed
+CertMgr -add -c UCA_Root.cer -s Disallowed
+CertMgr -add -c UCA_EV_Root.cer -s Disallowed
+
+:Exit
+:: Print to screen.
+@echo.
+@echo Done. Please confirm the messages on screen.
+@echo.
+@pause
diff --git a/Windows/System/Certs/CertMgr.exe b/Windows/System/Certs/CertMgr.exe
index 911654e3c151ec341b4a2fed5959a3570109a1dc..0c19be670c7cb3f134cb837c8e03406894e2ee2e 100644
Binary files a/Windows/System/Certs/CertMgr.exe and b/Windows/System/Certs/CertMgr.exe differ
diff --git a/Windows/System/Certs/CertMgr_x86.exe b/Windows/System/Certs/CertMgr_x86.exe
new file mode 100644
index 0000000000000000000000000000000000000000..911654e3c151ec341b4a2fed5959a3570109a1dc
Binary files /dev/null and b/Windows/System/Certs/CertMgr_x86.exe differ
diff --git a/Windows/System/Certs/Certification_Authority_Of_WoSign.cer b/Windows/System/Certs/Certification_Authority_Of_WoSign.cer
new file mode 100644
index 0000000000000000000000000000000000000000..1a1e3e613f8dce68bf04a66fcfe38cb362cc924e
Binary files /dev/null and b/Windows/System/Certs/Certification_Authority_Of_WoSign.cer differ
diff --git a/Windows/System/Certs/Certification_Authority_Of_WoSign.crt b/Windows/System/Certs/Certification_Authority_Of_WoSign.crt
deleted file mode 100644
index e3abaaa758ccdebac27a00285acbd4ca5ec08bf2..0000000000000000000000000000000000000000
--- a/Windows/System/Certs/Certification_Authority_Of_WoSign.crt
+++ /dev/null
@@ -1,32 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIFdjCCA16gAwIBAgIQXmjWEXGUY1BWAGjzPsnFkTANBgkqhkiG9w0BAQUFADBV
-MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxKjAoBgNV
-BAMTIUNlcnRpZmljYXRpb24gQXV0aG9yaXR5IG9mIFdvU2lnbjAeFw0wOTA4MDgw
-MTAwMDFaFw0zOTA4MDgwMTAwMDFaMFUxCzAJBgNVBAYTAkNOMRowGAYDVQQKExFX
-b1NpZ24gQ0EgTGltaXRlZDEqMCgGA1UEAxMhQ2VydGlmaWNhdGlvbiBBdXRob3Jp
-dHkgb2YgV29TaWduMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvcqN
-rLiRFVaXe2tcesLea9mhsMMQI/qnobLMMfo+2aYpbxY94Gv4uEBf2zmoAHqLoE1U
-fcIiePyOCbiohdfMlZdLdNiefvAA5A6JrkkoRBoQmTIPJYhTpA2zDxIIFgsDcScc
-f+Hb0v1naMQFXQoOXXDX2JegvFNBmpGN9J42Znp+VsGQX+axaCA2pIwkLCxHC1l2
-ZjC1vt7tj/id07sBMOby8w7gLJKA84X5KIq0VC6a7fd2/BVoFutKbOsuEo/Uz/4M
-x1wdC34FMr5esAkqQtXJTpCzWQ27en7N1QhatH/YHGkR+ScPewavVIMYe+HdVHpR
-aG53/Ma/UkpmRqGyZxq7o093oL5d//xWC0Nyd5DKnvnyOfUNqfTq1+ezEC8wQjch
-zDBwyYaYD8xYTYO7feUapTeNtqwylwA6Y3EkHp43xP901DfA4v6IRmAR3Qg/UDar
-uHqklWJqbrDKaiFaafPz+x1wOZXzp26mgYmhiMU7ccqjUu6Du/2gd/Tkb+dC221K
-mYo0SLwX3OSACCK28jHAPwQ+658geda4BmRkAjHXqc1S+4RFaQkAKtxVi8QGRkvA
-Sh0JWzko/amrzgD5LkhLJuYwTKVYyrREgk/nkR4zw7CT/xH8gdLKH3Ep3XZPkiWv
-HYG3Dy+MwwbMLyejSuQOmbp8HkUff6oZRZb9/D0CAwEAAaNCMEAwDgYDVR0PAQH/
-BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFOFmzw7R8bNLtwYgFP6H
-EtX2/vs+MA0GCSqGSIb3DQEBBQUAA4ICAQCoy3JAsnbBfnv8rWTjMnvMPLZdRtP1
-LOJwXcgu2AZ9mNELIaCJWSQBnfmvCX0KI4I01fx8cpm5o9dU9OpScA7F9dY74ToJ
-MuYhOZO9sxXqT2r09Ys/L3yNWC7F4TmgPsc9SnOeQHrAK2GpZ8nzJLmzbVUsWh2e
-JXLOC62qx1ViC777Y7NhRCOjy+EaDveaBk3e1CNOIZZbOVtXHS9dCF4Jef98l7VN
-g64N1uajeeAz0JmWAjCnPv/So0M/BVoG6kQC2nz4SNAzqfkHx5Xh9T71XXG68pWp
-dIhhWeO/yloTunK0jF02h+mmxTwTv97QRCbut+wucPrXnbes5cVAWubXbHssw1ab
-R80LzvobtCHXt2a49CUwi1wNuepnsvRtrtWhnk/Yn+knArAdBtaP4/tIEp9/EaEQ
-PkxROpaw0RPxx9gmrjrKkcRpnd8BKWRRb2jaFOwIQZeQjdCygPLPwj2/kWjFgGce
-xGATVdVhmVd8upUPYUk6ynW8yQqTP2cOEvIo4jEbwFcW3wh8GcF+Dx+FHgo2fFt+
-J7x6v+Db9NpSvd4MVHAxkUOVyLzwPt0JfjBkUO1/AaQzZ01oT74V77D2AhGiGxMl
-OtzCWfHjXEa7ZywCRuoeSKbmW9m1vFGikpbbqsY3Iqb+zCB0oy2pLmvLwIIRIbWT
-ee5Ehr7XHuQe+w==
------END CERTIFICATE-----
diff --git a/Windows/System/Certs/FakeGitHubCom_2013_01.cer b/Windows/System/Certs/FakeGitHubCom_2013_01.cer
new file mode 100644
index 0000000000000000000000000000000000000000..dec381fb9a6f0cdc52ca4fcfa81755c2577371cd
Binary files /dev/null and b/Windows/System/Certs/FakeGitHubCom_2013_01.cer differ
diff --git a/Windows/System/Certs/FakeGoogleCom_2014_07.cer b/Windows/System/Certs/FakeGoogleCom_2014_07.cer
new file mode 100644
index 0000000000000000000000000000000000000000..6ed201f3147a4f259e435c28382b11980787643f
Binary files /dev/null and b/Windows/System/Certs/FakeGoogleCom_2014_07.cer differ