I am getting a lot of "Your connection is not private - Attackers may be trying to steal your information from (the details of the web address)" error messages, with the reason NET::ERR_CERT_DATE_INVALID. When you click on NET::ERR_CERT_DATE_INVALID it gives a date of a certificate which is not out of date. If I try and access the same site from my iPad I have no issues. Can anyone help solve this issue on my iMac please.
iMac 27″, OS X 10.11
Hey Rmng_2021,
It appears that you're running into a problem going to websites using a browser on your iMac. You're getting a message that the website isn't private, and the reason given is a certificate id invalid, and we're glad to provide assistance.
If you can’t open a website in Safari on Mac - Apple Support -- See if the steps on this page of the Safari User Guide helps.
Get Support -- If the steps provided didn't resolve the issue, please contact Apple Support. Select Other Mac Topics > Safari questions or troubleshooting to connect.
All the best.
On the 30th of September 2021 certificates expired that allow your mac to connect to various websites.
This affected all macs running macOS Sierra 10.12.1 and older OS X's like yours OS X 10.10.5 Yosemite.
Click on this link, https://community.letsencrypt.org/t/os-x-10-11-clients-not-connecting-to-site-with-lets-encrypt-certificates/161576
and follow the instructions within to download new valid certificates and install them to your keychain.
The alternative would be to upgrade your macs OS to an OS that works with more modern browsers
and has better security protocols.
Which OS you can upgrade to will be governed by which model and year your mac is.
Click on the top left of your screen click on About This Mac to find out the year of your mac.
If you find your mac can upgrade to the newer OS's like macOS Mojave 10.14, macOS Catalina 10.15,
or macOs Big Sur 11.6 I would recommend you upgrade to macOS High Sierra 10.13 first.
For High Sierra, Mojave or Catalina,
Open Safari and click on this link,
How to get old versions of macOS – Apple Support
Go to Check Compatibility to see if your mac qualifies for the OS upgrade you want.
Then go to the Download OS section and click on the OS you want to install.
Before upgrading make a full back up of your Mac.
Check that third party apps you use have updates available for the new OS.
Check that your printers/ scanners etc have updated drivers and software available for the new OS.
Connect your mac to your router via cable rather than rely on WiFi.
Do not use your mac while it is downloading
and do not use any other devices that share the same internet connection.
If the App Store says ‘Open’ then it is detecting a previous download of the install app
go to the Applications folder locate Install macOS ******.app.
Move it to the Trash, empty the Trash.
Restart, click on the link again, the App Store should say ‘Get' or 'Download'.
If you want to or are able to install Big Sur, open Safari and click on the link below.
How to upgrade to macOS Big Sur - Apple Support
If you are considering upgrading to Catalina or Big Sur be warned they do not support 32bit apps.
Your Mac is probably running 32bit apps and these will need to be updated to 64bit apps,
some updates may be free, some may be paid. Use this free app to discover which apps you have
are 32bit, https://www.stclairsoft.com/Go64/ then contact the developers of the software to see
if they are offering 64bit updates.
For mac's running older versions (pre 11), a specific root certificate expired on September 30, 2021. I've searched board after board and here was the only thing that fixed it:
Thanks to Qchrontech on LetsEncript board:
https://community.letsencrypt.org/t/connection-errors-on-apple-devices/161107/27
I can Confirm a fix that worked on both a 10.9.5 & 10.11.6 Mac OS users. Simply set the DST Root CA X3 to "Always Trust" on several Mac's I manage in an office and home's this fix work for 4 websites that previously had issues with this CERT ERR.
Directions for fix:
Interesting I contacted Apple today and talked to an Specialist, she never heard anything about this error. The only suggestions was the scripted suggestion "upgrade El Capitan" duh......Sure and loosing all my owned content once I upgrade and wipe them out.
In fact she suggested to upgrade to Sierra, High Sierra or Mojave since I was worried about upgrading. And now I see that even using mac OS Sierra is not immune from this mess.
I don't know how to fix this. I am not a tech geek. I'm beyond frustrated !!!!!!
I have read all the treads here but I'm still very frustratred. Oh how I wish I could get remote help. It seems that lots of repair shops are not too famiar with this issue. I talked to Authorize Apple repair shops, and they didn't sound confident at all.
I have tons of 32 bits apps running, including Office. Upgrading would be major step, complicated and expensive to say the least. Could I get by, just doing nothing?????
Why after a month have you not downloaded the new certificates and installed them, it is very easy to do.
And it will do no harm to your computer or operating system.
Many, many people have done so and are operating on El Capitan.
In this thread alone you have been given two ways to resolve the question.
Try this;
Click on the link below,
https://letsencrypt.org/certificates/
Download these two files
ISRG Root X1
Self Signed click on the der to download
And ISRG Root X2
Self signed click on der to download.
Open the Keychain Access app in your Applications> Utility folder.
In the left column highlight System.
Click on File in the menubar and click on Import Items,
select the newly downloaded files in turn and press Open.
Double-click on one of the newly imported certificates, click on the disclosure triangle
and next to When using this certificate: change Use System Defaults to Always Trust.
Do the same for the other certificate.
Restart your mac.
Hi Eau
I have been trying to find this response. Thanks, but I'm still scared S.....less, because I don't feel very confident dealing with Root etc.
According to your suggestion on your last paragraph you said: "Double-click on one of the newly imported certificates, click on the disclosure triangle and next to When using this certificate: change Use System Defaults to Always Trust.
Do the same for the other certificate."
What do you mean do the same for other certificate? Do I have to repeat the process more than once?.
I'm very frustrated. As I said before Apple's DNA is to buy a new Mac, or upgrade the OS, dugh.
As you can see I'm not very comfortable navigating through this mess. Thanks
I opened the link and there are multiples ISRG RootX1 and ISRG Root X2 files. They are under different sections ie., Active, limited availability, Backup, Retired.
Am I suppose click and download ISRG Root X1 and X2 files from each section?
Randy
You are a lifesaver. I followed the instructions that Eau gave me which I really appreciate his assistance, but still I was not able to get rid of the error message. I decided to try your version. Voila, I think the trick was getting to X3 file. Using your system there was no need to download any files, I think. Nevertheless, it worked.
The only issue is that using Safari it doesn't work trying to login into Apple Community. Oh well
Eau
Again, thanks a bunch for your help. I followed your instructions, but for some reason (maybe it was my fault), I was not able to get rid of this persky error message. Perhaps, it required to get to X3 file. As I told Randy, I read his instructions and he included X3 file.
No matter what the outcome has been positive, thus far. Again, thanks for helping me getting some confidence doing this. I am not too comfortable getting outside my comfort zone in getting under the hood of my Mac
THANK YOU, THANK YOU, THANK YOU!!!!
I have been struggling with this problem for several months and this is the first solution that has worked AND that as a lay person, non Tech Geek, that I was able to understand and apply;
Your connection is not private
