Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Safari can't verify the identity of the website

This message comes up every time I try to log in to my bank, ebay, paypal, vodafone, hotmail, etc. Basically everything I try to log into. It tells me the certificate is invalid, or the issuer is invalid. This just started one day a little while ago. I have all these pages bookmarked and safari used to be fine with them. I downloaded firefox to see if it was just a safari thing, and it did not have this problem. Can someone please tell me how to fix this with safari? Version 5.0.1

MacBook Pro, Mac OS X (10.6.4)

Posted on Aug 8, 2010 8:48 PM

Reply
Question marked as Top-ranking reply

Posted on Aug 9, 2010 12:15 AM

HI and welcome to Apple Discussions....

From the Safari Menu Bar click Safari/Reset Safari. Select all the boxes. Then from the Menu Bar click Safari/Quit Safari.

Now relaunch Safari. Try logging into one of those sites.

If that didn't help, try troubleshooting the Safari .plist file.

Open a Finder window. Select your Home Folder in the Sidebar on the left. It has a small house icon. Then open the Library folder then the Preferences folder. Move the com.apple.Safari.plist file from the Preferences folder to the Desktop. Now launch Safari. Navigate to a site that normally has a signed certificate like your bank. If you can do this without the invalid certificate dialog, move that .plist file to the Trash.









Carolyn 🙂
93 replies
Question marked as Top-ranking reply

Aug 9, 2010 12:15 AM in response to RussyPlum

HI and welcome to Apple Discussions....

From the Safari Menu Bar click Safari/Reset Safari. Select all the boxes. Then from the Menu Bar click Safari/Quit Safari.

Now relaunch Safari. Try logging into one of those sites.

If that didn't help, try troubleshooting the Safari .plist file.

Open a Finder window. Select your Home Folder in the Sidebar on the left. It has a small house icon. Then open the Library folder then the Preferences folder. Move the com.apple.Safari.plist file from the Preferences folder to the Desktop. Now launch Safari. Navigate to a site that normally has a signed certificate like your bank. If you can do this without the invalid certificate dialog, move that .plist file to the Trash.









Carolyn 🙂

Jan 16, 2012 5:53 PM in response to Muckwizard

The problem for me turned out to be in the Keychain preferences. Try the following:


Open Keychain Access ( Applications - Utilities - Keychain Access).


Open the Keychain preferences (Keychain Access (in upper left corner) - Preferences).


Select the Certificates tab.


Set the following options:

Online Certificate Status Protocol (OCSP): Require if Cert Indicates

Certificate Revocation List (CRL): Require if Cert Indicates

Priority: OCSP


If these options are greyed out, hold the Option key at the same time as opening the options.

Jul 23, 2012 9:39 AM in response to RussyPlum

I had this problem also.

Starting safari and going to the default apple page (http://www.apple.com/startpage/) would throw an error about a facebook certificate.


In addition, when this problem happened, I would loose all my safari extensions.


It only happened at work, connected through the work firewall so something was probably getting messed up by the firewall.


For me the keychain fix worked, specifically, open keychain, command-, for preferences, click the certificate tab and set Online Certificate Status Protocol (OCSP) to off.


It immediately fixed the issue with facebook and I was able to re-install my extensions. Which I used to have to wait until I was off the network to fix.

Aug 3, 2012 3:36 PM in response to RussyPlum

I just wanted to update this thread that I found a solution for me on another thread. It looks like my problem with the certificates was a bug in Lion. I was also having difficulty connecting to the App Store to download Mountain Lion for an upgrade. Here is the thread and here is the blog post that I found on that thread with the instructions that solved my issue. I hope this helps someone else too! Good luck!

Aug 9, 2010 10:04 PM in response to RussyPlum

HI,

Try something else. From your Safari Menu Bar click Safari/Preferences then select the Security tab.
Click: Show Cookies. Delete all the cookies for the sites you have problems with certificates.

Now relaunch Safari and try one of those sites.

*Delete one of the sites you had Bookmarked prior to the Safari update.* Then navigate to that site. See if you there's a verification issue. If not, then just add that site to your Bookmarks. Same for the rest.






🙂

Oct 2, 2010 12:03 PM in response to Carolyn Samit

I have the same issue. Aren't sites supposed to provide current security certificates from a known issuing authority, so that companies like Apple can 'push' updated security certificates via Software Update? In the case of CitiBank, they recently re-vamped their credit cards page and now when I use the "www.citicards.com" URL on my credit card, I get the message, "Safari can't verify the identity of the website, "creditcards.citi.com" - The certificate has been signed by an unknown certifying authority...this website may be pretending to be...." , etc.

This is a show-stopper for me, for sure: I can't afford to have such questions raised when visiting my credit card account site!!!

I have wondered if this issue is caused by sloppy webmaster practices, where they just don't bother to update their security certificates after making changes to website structures.

Whatever the cause, it defeats the entire purpose of secure online banking.

Another thing I've noticed (though this is off-topic, since it's about Firefox): On one of my Macs, Firefox's preferences\security tab allows me to check a box to 'tell me if a site I'm visiting is a suspected forgery'. On another one of my macs, this same box is mysteriously greyed out. How's the average user supposed to know if this is the result of some hacker compromising their browser?

Mar 5, 2011 6:47 PM in response to Carolyn Samit

I'm having this same problem except its my iPhone not my computer..What can I do in order for this message to go away? It keeps saying:

Cannot verify server identity..Safari cannot verify the identity of facebook.com..would u like to continue? Everytime I go to facebook..Sometimes, it doesn't say that, ONLY when it has that "Lock" logo next to the web browser..I don't know why there are times the logo isn't there and most of the times, no lock logo..This NEVER happened before. What can I do to fix it?? Someone PLEASE help..

Jun 4, 2011 8:16 AM in response to RussyPlum

Okay - I have this same problem. It's not a certificate in the keychain, because I don't have one for Facebook.


It persists after I reset safari, delete cookies, download the newest safari update, etc.


My computer has the correct date and time.


I even set safari preferences to "autofill user names and password" on someone's suggestion, and it did not work.


The problem is one with the safari program, plain and simple. Apple needs to fix it and send out a patch.

Nov 7, 2011 7:56 AM in response to jeanettefromgilbert

Hi, I just had the same problem after my Mac shutdown due to an empty battery. When i charged and power-up, the date was set to 1 Jan 2000. I then manually set the time and this problem came. After rechecking the automatic date box, the problem went away. Hope the extra bit of info helps the next person. Thanks everyone for sharing this.....really got me sweating for a while.

Andrew Cheong

Nov 9, 2011 12:09 PM in response to RussyPlum

I have been having the same problems for the last couple of months. Even iTunes gives me an error message saying it doesn't trust Apple's own site.


An apple salesperson suggested repairing permissions. That isn't the issue.


I thought it was me until I helped a friend last night who complained of the same thing.


The warning is now useless since I always ignore it now.

Nov 26, 2011 5:01 PM in response to RussyPlum

I am having the same issue but the Date/Time fix is NOT working for me. I have uninstalled all extensions, reset all data, removed the .plist files for Safari and going to PayPal gives me the warnings not the mention taking me to an unstyled PayPal home page (No CSS) if I accept the certificate.


anyone else have any other ideas?

Feb 1, 2012 9:38 AM in response to RussyPlum

I've been having the same problem for about four to six months, although on my computer it's every website on EVERY browser I try, from Firefox to Chrome. I have visited the Apple store twice, they weren't really understanding my problem somehow and have sent me home both times telling me that it's fixed. My problem began happening shortly after my computer quit connecting to my home internet because it had a self-assigned IP address. At that point, I could connect elsewhere, but ANY website I have to fill in a user login and password would just reload automatically to the blank sign-in page. When I reset the ip address, that problem went away with some websites, such as tumblr and my school's student email, but got worse for others (when I try to log into Facebook or Amazon now, it reloads to a text-only view of those websites). In addition to this problem, my software updates will no longer install, and neither will software I attempt to install myself, such as for my printer.


It seems to me that my problem is worsening. I have tried all of the options listed above, as have the employees at my local Genius Bar. I know that Mac's aren't supposed to have viruses or malware or etc, but this definitely seems to be something of that variety. At this point I'm ready to wipe my hard drive and start over...which would be a lot easier if my external would connect to this diseased computer or my TimeMachine was working properly, which it has not been doing lately.

Feb 1, 2012 4:01 PM in response to ChelsiW

Do you thinkn it could be some sort of malware?? Maybe someone got it figured out?? It seems like it now happening worse than it was.. While I have not noticed any other issues aside from websites that I need to log into seem to have weird certificates. For example face book, when it prompts me that it cant verify the certificate it claims that it does not match. When I look at the certificate, its a gamestop cert... I dont know why. Now usually if I click continue it says access denied. And I have to reset safari in order to get back on. Now, it seems it brings me to the same page and all it says is 'success' and then I can re-enter facebook into the navigation bar and be on my way.


This seems strange to me, and I was wondering if someone was accessing my computer, (like I had some sort of virus or whatnot) so I tried to track the traffic in and out of my computer, using little snitch and I didn't see anything out of the ordinary. Has Mac released any information? Has anyone found *** is happening?? It is not quite as big a problem as you (chelsiW) but I fear it may escalate to that point..

Safari can't verify the identity of the website

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.