9-30-21 expired SSL Certs fix

[Certificate of Excellence]

Are you stretching the usefulness of your old intel mac running el cap (or earlier) and all of the sudden right in the middle of nailing down your term paper and wikipedia decides not to connect (or a whole helluva lot of websites for that matter)? All your common browsers are complaining and boo-hoo ing like GRUMPY PRINTER. Rest assured, you're not stuck. There's an incredibly simple and calming fix. This video does a fantastic job of explaining it.

The short story is download certificate ISRG Root X1 (the PEM variant) from THIS safe website and run it. It will install this to your keychain, where under certificates you'll most likely see it with a big red X. Double click this, tell keychain to "Always Trust" and then drag to System so it is utilized across the entire system.

Go back to wikipedia and you should be good to go, crisis averted. Bookmark the website for good measure for future updating.

 

[TheShortTimer]

Are you stretching the usefulness of your old intel mac running el cap (or earlier) and all of the sudden right in the middle of nailing down your term paper and wikipedia decides not to connect (or a whole helluva lot of websites for that matter)? Rest assured, you're not stuck. There's an incredibly simple and calming fix. This video does a fantastic job of explaining it.

The short story is download certificate ISRG Root X1 (the PEM variant) from THIS safe website and run it. It will install this to your keychain, where under certificates you'll most likely see it with a big red X. Double click this, tell keychain to "Always Trust" and then drag to System so it is utilized across the entire system.

Go back to wikipedia and you should be good to go, crisis averted. Bookmark the website for good measure for future updating.

Thanks for sharing this solution - it's tremendously useful for my Mac Pro which is stuck at El Capitan. Wouldn't have dared use Wikipedia for a term paper though.

(Cue outrage from Wikipedia fans.)

 

[Certificate of Excellence]

Yeah man, I didn't see it anywhere on this sub forum and figured there's folks out there about to give up on their old macs. I also use El Cap on 3 of my DDs so Im sure someone else will find this useful when they realize their certs are expired (if they haven't already).

 

[TheShortTimer]

Yeah man, I didn't see it anywhere on this sub forum and figured there's folks out there about to give up on their old macs. I also use El Cap on 3 of my DDs so Im sure someone else will find this useful when they realize their certs are expired (if they haven't already).

Definitely appreciated. I'll never give up on my old Macs but I will take any opportunity to rant at Apple - who could've released many of these fixes to help people with older machines (and it would've encouraged them to still purchase new Macs when they want to upgrade) but this has been done to death in other threads. Thanks again.

 

[bobesch]

Definitely appreciated. I'll never give up on my old Macs but I will take any opportunity to rant at Apple - who could've released many of these fixes to help people with older machines (and it would've encouraged them to still purchase new Macs when they want to upgrade) but this has been done to death in other threads. Thanks again.

Apple only seems to care about 2-3y prolonged support for the aftermarket of the *first* 2nd-hand buyers, since them buyers fund the first-hand-owners making them purchase a new Mac from Apple.
So Apple care is related to the first-hand-owner and extended support for faulty design or components maybe is for another 2-3y (because major hardware flaws of components might appear only after some time of heavy usage).
They are obviously not interested in third party owners and the promise of environmental protection is just based on the offer to take back stuff for a penny and recycle the raw-materials.
That's just economy as usual and not to be mixed up with an ecological spirit. (But "Whoever is without sin, shall lift the first stone.")
Meaning for the 2nd+ aftermarket buyers: for any new version/design of hardware calculate 1-2y/gen. of premium-alpha-testing and expect the mature product as the very last version prior to the next major upgrade. (certain 13"MBP early and late-early intel MBP excluded )

 

[im_to_hyper]

The quick link is: here from CertifyTheWeb and the instructions they have are:

• Download the ISRG Root X1 certificate file from http://x1.i.lencr.org/
• Open the Keychain Access app and drag that file into the System folder of that app.
• Find the ISRG Root X1 certificate in System and double click on it, open the Trust menu and change "Use System Defaults" to "Always Trust", then close that and enter your password to confirm the change (if prompted).