Step 5: Click 'confirm' or 'yes' on any dialogue about whether or not you want to add the certificate, and when presented with the screen with a prompt that says you can choose whether to add the certificate for one user or the entire 'System' (all users), choose 'System' in the 'Keychain' drop-down to fix the error for all users. If it doesn’t open with Ke圜hain Access, then open the Ke圜hain Access app manually by either searching for it via Spotlight ? or finding it in the Utilities App Folder.

The file opens with Mac OS’s certificate store called Keychain Access. You now have a file that looks like this:

Step 2: Save it by right-clicking on the page and clicking save as (or if in Safari, click File > Save as ). If the Lets Encrypt site itself is marked as insecure for you, you can download it from here: (don’t make downloading certs from websites a habit though).ĭon’t let the encoding of the file intimidate you. Step 1: Get the legit isrg root x1 certificate from Let’s encrypt by visiting. The process is very similar on other Mac OS versions as well. Here is how to add the isrg root x1 certificate on Mac OS El Capitan. Manually Adding Certificates on Mac OS El Capitan However, you can also manually add certificates to your computer’s certificate store. OS updates usually include the latest batch of certificates required to verify most websites you might visit. Your computer has a list of certificates that allow it to verify the authenticity of the websites you visit. You need its replacement isrg root x1 to resolve the NET::ERR_CERT_DATE_INVALID error. The error is probably occurring on your older computer because the popular certificate DST root ca x3 from the certificate authority Let’s encrypt expired on September 30, 2021. If you are using an older Mac OS X version to browse the web, it’s likely that you recently started seeing 'NET::ERR_CERT_DATE_INVALID', 'Your connection is not private', 'Clock expired privacy issue', 'Safari can’t verify the identity of the website', or a similar error in your browser, when trying to visit sites that should be safe.

Don’t Let Replacing the Expired DST Root CA x3 Bring You Down

Chrome for el capitan