You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

"AddTrust External CA Root" Certificate Expired: Websites Won't Open

Hello!


My specs:

Model Name: MacBook Pro (Retina, 15-inch, Mid 2014)

Model Identifier: MacBookPro11,3

OS X El Capitan, v10.11.6


Over the last few days, certain websites will not open on Safari or Opera. The 'error' message states the following:

This Connection Is Not Private

This website may be impersonating “xyz.com” to steal your personal or financial information. You should go back to the previous page.

Go Back

Safari warns you when a website has an expired certificate. This website’s certificate expired 3 days ago. This may happen if the website is misconfigured, an attacker has compromised your connection, or your system clock is incorrect. Your system clock is set to Tuesday, June 2, 2020. If this is not right, fixing the clock may address this warning.

To learn more, you can view the certificate. If you understand the risks involved, you can visit this website.


The culprit seems to be 'ADDTrust External CA Root' certificate expired on 5/30/2020. All the websites that aren't opening point to the 'ADDTrust External CA Root' certificate.


Are there any solutions other than upgrading to Catalina? Can certificates be updated?


Thank you in advance for your help or time.



MacBook Pro 15″, OS X 10.11

Posted on Jun 2, 2020 3:16 PM

Reply

Similar questions

13 replies

Jun 13, 2020 1:25 PM in response to BDAqua

I had no luck with removing certificates or the endless other things I tried. But:


Solved! Known problem in El Cap, simple fix. Grrr.


Called Apple four days ago and got an incompetent tech. She essentially ended up shrugging her shoulders, no clue, sent me packing.


That started three days of Catalina upgrade and endless reboots and calls to other software firms to TRY and solve all the ensuing problems. (Lots of old apps croak, plus problems with Apple apps/services.)


Called again today and got savvy tech who's been using Macs since '86 (newbie, by my lights... ;-) ).


Just upgrade El Cap to Sierra. Sweet mother Mary. If that first tech had just told me that...


Sierra: https://support.apple.com/kb/HT208202


The install program on this DMG installs an installer in your Applications folder. Run that.


Other, later installers:


High Sierra: https://support.apple.com/kb/HT208969


Mojave: https://support.apple.com/kb/HT210190

Jun 5, 2020 3:14 AM in response to snam-5370

There is Mojave 10.14.6, or slightly older High Sierra 10.13.6. These do not require your system apps

or drivers to be fully 64-bit compliant; and can still use 32-bit software so that you may not need

to also get newer printer, or peripherals for 64-bit only. ~ Catalina macOS 10.15.x is solely 64-bit.


• How to upgrade to macOS Mojave 10.14.6 - Apple Support

https://support.apple.com/en-us/HT210190


Be sure to have at least two backups of your present system prior to upgrade attempts; Time

Machine can be useful to restore from, should you wish keep older stuff into a newer system;

although some users prefer all-new content.


Other options could include using third-party Browser (Firefox) and Email client (Thunderbird)

to stay with the older El Capitan 10.11.6. ~ At least until you've figured this further along.


Good luck & happy trails!🌻🌤

Jun 5, 2020 11:53 AM in response to snam-5370

According to actual experience (and wikipedia) Safari version 11.1.2

for El Capitan 10.11.6, support faded (July 9, 2018). While I sought info

about Opera, lacked detail for their recent version or present status.


The "Brave" web browser is supported/runs in El Capitan 10.11.6; and

may be OK once details using it, are understood. https://brave.com/


The Opera background changed with their adapting Chrome features;

some macOS users at that time, had issue with Opera. I'd not used it

since just before major transitions; & it didn't work for me or my mac.


There had been some ability to change User Agents in certain browsers

to see if they still be useful after their sunset; some did OK for awhile. I'd

not tried this recently. (With older vintage Mac OS X, I'd tried to do that.)


The certificates idea -in previous situations- was workable; there may be

path through this shortcoming by using the 'Apple IST CA 2 - G1 Cert.'

{..Thanks BDAqua for this; to see if that's an option.!}


Good luck & happy trails!🌤☘

"AddTrust External CA Root" Certificate Expired: Websites Won't Open

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.