Using iOS 16.1, the root certificate "DST Root CA X3" expired. I never installed that to my knowledge.

Question

Level 1

21 points

Using iOS 16.1, the root certificate "DST Root CA X3" expired. I never installed that to my knowledge.

iOS versions through at least16.1 have a root certificate "DST Root CA X3" that is expired. My email server uses Lets Encrypt certificates, which test as perfectly valid with SSL Labs for example. But iOS keeps an expired certificate in its store, causing frequent annoying modal popups. These popups block any use of the phone until cleared. Yet mail does somewhat work, though not as well as with prior iOS versions.

How can I remove this invalid, expired root certificate?

iPhone 12 Pro Max

Posted on Oct 28, 2022 11:46 PM

Reply

Answer 1

DerekM87

Community Specialist

Oct 31, 2022 12:54 PM in response to GeekZero

Hi GeekZero,

You can check if there is a device management profile corresponding to the certificate under Settings > General > Profiles or Profiles & Device Management on your iPhone. If there is, deleting the profile should stop that behavior.

If not, or if there is no profile, also check under Settings > General > About > Certificate Trust Settings to see if there is a custom certificate you can remove there.

Intro to certificate management for Apple devices - Apple Support

If you're unable to locate one or have further questions, we'd advise reaching out to Apple Support directly for assistance from there.

Cheers!

Reply

Using iOS 16.1, the root certificate "DST Root CA X3" expired. I never installed that to my knowledge.

Similar questions