Ipad 2 IOS 9.3.5 - How to add a new root certificate to the trust store? Wikipedia inaccessible.

As of October 2021 sites such as Wikipedia which use an updated Let's Encrypt SSL Certificate no longer can be accessed via Chrome or Safari browsers available for this device. The ios 9 trust store lacks the ISRG Root X1 root cert: https://letsencrypt.org/docs/certificate-compatibility/


Is there any way for users to update our device's trust store with this root certificate?


To others left without ability to use wikipedia on these devices, note that you can use Maxthon Browser v5.4.8.3 to access wikipedia and other sites using these types of ssl certs (you are prompted to "cancel" or "continue" during notification that the site's security cannot be trusted, whereas chrome and safari offer no option to continue to the site.


Thanks

Posted on Oct 4, 2021 2:22 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 4, 2021 2:46 PM

There's no good way to do this, that far back.


Probably the least-bad option, which requires some work on a Mac with more recent software... Try creating a configuration profile with the LetsEncrypt root certificate and the LetsEncrypt intermediate certificate on a Mac with the Apple Configurator 2 app installed, and see if that configuration profile can then be installed on the iPad second-generation, and allow access.


Or use an alternate browser with its own certificate store.


Or replace the iPad 2 with something supported by recent or current iOS versions.

26 replies
Question marked as Top-ranking reply

Oct 4, 2021 2:46 PM in response to letters9umbers

There's no good way to do this, that far back.


Probably the least-bad option, which requires some work on a Mac with more recent software... Try creating a configuration profile with the LetsEncrypt root certificate and the LetsEncrypt intermediate certificate on a Mac with the Apple Configurator 2 app installed, and see if that configuration profile can then be installed on the iPad second-generation, and allow access.


Or use an alternate browser with its own certificate store.


Or replace the iPad 2 with something supported by recent or current iOS versions.

Nov 13, 2021 9:05 AM in response to -Agnapot-

In addition to its usefulness for (for instance) loading the VPN settings for an affiliated organization’s VPN servers into the Apple devices of associated people, and for many other similar uses including loading organizational-associated certificates, manually loading a profile is how some sketchy apps hook more deeply into an iPhone or iPad, so, yes, it can be done.


Here’s how:


Trust manually installed certificate profiles in iOS and iPadOS - Apple Support


I don’t have iOS 9 around, so no way to test.


Backing up, resetting and reinstalling, and restoring might clear the Settings crash. Nobody here can know that.


Oct 29, 2021 1:18 PM in response to lary1d

lary1d wrote:

so the problem for me, i think, is the same as the person who started this thread, how to add a new root certificate to the overdrive app so it will access the public librarys catalogues that i use to borrow ebooks.
the troglodyte


Create a certificate profile on a Mac using the Apple Configurator 2 app, or try loading and trusting the root certificate directly. These from the first several replies to this thread.

Oct 26, 2021 2:00 PM in response to Fia-Lotta

Fia-Lotta wrote:

How do i get that file into my Mac, the file is loading down, but how can i get it to the right place so it will help my computer?


This thread is about old versions of iOS for iPad and iPhone, so a different issue and different tools. For a Mac, your best option is to upgrade to Sierra or High Sierra or newer. If your Mac is permanently stuck at El Capitan, Open Keychain Access, select the System Roots keychain, and add and trust the newly-downloaded certificate. If you have access to a newer Mac (High Sierra or newer), export all of the certificates there, transfer, and import them.

Oct 26, 2021 3:37 PM in response to Fia-Lotta

Fia-Lotta wrote:

Thanks for your help, i can come to the system Roots, but after that Im bet ..... i just now try to load down Firefox, it might help!


What's the model and year of your Mac? Apple > About This Mac > (if the model and year doesn't show in that display) > select Hardware, and post the Mac Model Identifier from the Hardware Overview display. That Mac model identifier should be a string and a pair of comma-separated numbers, for instance, iMac21,1. Post that model identifier string here. With the Mac model and year, or the Mac hardware identifier, somebody here can fetch your upgrade options.


As for importing the certificate, that's akin to this:


Keychain Access > File > Import Items > select the certificate file that you've downloaded.


I don't have an El Capitan or older Mac handy to check that, though.

Oct 26, 2021 6:38 PM in response to Fia-Lotta

You need utility called Keychain access. You can use Spotlight search to open it. Once in it, click on System padlock NOT the system roots in Keychains window. Also in Category window select all items. Open you download folder in Finder and grab the certificate you dowloaded(isrgrootx1.pem) and move(copy) it to Keychain access main window(has other certificates in it). Enter username and password as required by system. Double click on the certificate in Keychain access window. Expand trust menu. Select When using this certificate Always Trust. Password as required. And you are DONE.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Ipad 2 IOS 9.3.5 - How to add a new root certificate to the trust store? Wikipedia inaccessible.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.