Apple Developer Certificates

Question

Level 1

12 points

Apple Developer Certificates

Who do I contact in regards to validating an Apple "Developer" Certificate?

I noticed a particular "Developer Certificate" in my System Keychain Folder quite a while ago and I recently used GPG tools to identify the name of the developer it is associated with.

I have included a screenshot of the Developer Certificate (including his name, the serial number and the Signature). Please note that I went ahead and distrusted the certificate after viewing this prompt, but the certificate was marked as "trusted" prior to that.

Please advise.

Thank you!

MacBook Pro

Posted on Aug 31, 2019 4:06 PM

Reply

Answer 1

etresoft

Level 9

57,260 points

Sep 4, 2019 12:58 PM in response to alissa296

I think you will have to ask the developers of GPG that question. I am a developer, but the only Developer ID certificate I have on my machine is my own. You should not be seeing that unless you are Lukas Pitschl. A quick Google search says that Lukas Pitschl is the lead developer for GPGMail. I don’t know why GPG would be installing this certificate.

Reply

Answer 2

alissa296 Author

Level 1

12 points

Sep 9, 2019 6:42 AM in response to etresoft

Thank you so much for your response and for taking the time to look into this certificate. I have erased & reformatted my hard drive, as I was running into a number of problems whilst trying to set up some of the basic web development tools I use on my machine. I will do as you suggested and reach out to GPG regarding this particular certificate.

I do want to also note that I am still seeing the Apple Developer Certificate in my Keychain Application (which I actually do not use, as I did not set up my admin account with iCloud). I am not an Apple Developer and I do not have/have not installed an Apple Developer Certificate of my own on my machine. Should I distrust this certificate? And do you have any other advice regarding this topic?

thank you again!

Reply

Answer 3

etresoft

Level 9

57,260 points

Sep 9, 2019 11:36 AM in response to alissa296

Sorry, but I can’t really help. I don’t know what will happen if you distrust that certificate. It may cause GPG to stop working. That might be a good thing though. If GPG is distributing a signing certificate along with the package itself, does that mean that anyone could build a signed version of GPG? That would be very bad.

Reply

Apple Developer Certificates

Similar questions