HTTPS Not trusted error

Question

HTTPS Not trusted error

Suddenly, some websites started to show "Not trusted" error to me and relevant apps stopped working too.

For example, when I open bankofamerica.com or chase.com in Safari:

It happens on cellular data and all Wi-Fis. I have inspected the certificate, it matches (fingerprints & serial number) what I see on my personal Windows machine and what is recognized to be a valid certificate to that Windows machine (Google Chrome):

I don't use any VPN or proxies, my certificate store seems to be up to date:

What could cause that? It seems my phone is safe, as the certificates' fingerprints match what I see from any other machine, but for some reason it refuses to trust it?

It's not a captive WiFi issue, I clicked "Visit the website" in private browsing mode, I see Chase website (+ the problem reproduces on cellular data).

iPhone 15 Pro

iOS 18.3 (latest)

USA

Restarting the phone, updating iOS didn't help.

iPhone 15 Pro

Posted on Feb 9, 2025 12:24 PM

Reply

Answer 1

Top-ranking reply

ykurmangaliyev Author

Level 1

11 points

Feb 9, 2025 8:22 PM in response to MrHoffman

Oh, wow, that's fun, I found the solution.

So, I opened Google Chrome to see if the issue persists. It did (SSL cert error), but I noticed that I'm still signed into my corporate Google account. Just to test it out, I clicked "Sign off" and the problem is gone.

So, uninstalling my corporate MDM profile didn't help, but signing off from my corporate Google account (perhaps, somehow implicitly linked to the MDM profile) after that did help. Maybe, this Google account can somehow manage the root certificates and distrust Entrust root CA?

Thank you for all your ideas and helpful, it was very helpful, I didn't feel lonely in this journey :)

Reply

Answer 2

Feb 9, 2025 6:03 PM in response to ykurmangaliyev

You mention not using add-on VPNs or proxies.

But do you have any of those apps installed?

If so, remove all, restart, and test again.

Same for any extensions, add-on security apps, and also for any DNS-related apps or content-filtering tools.

Reply

Answer 3

Feb 9, 2025 8:07 PM in response to ykurmangaliyev

Entrust roots were de-trusted: https://www.digicert.com/campaigns/entrust-certificate-distrust/faq

PS: the device time has to be close to current to work. Time values further away from “correct” will fail.

Reply

Answer 4

Feb 9, 2025 7:07 PM in response to ykurmangaliyev

Amy other profiles installed for, say, monitoring your network traffic?

Reply

Answer 5

Feb 9, 2025 7:40 PM in response to ykurmangaliyev

Is the iPhone time correct? (That’d usually be a more general problem though, not just for a few websites.)

Any custom DNS or network settings?

Reply

Answer 6

Feb 9, 2025 6:48 PM in response to MrHoffman

Thank you for your reply, good idea! I had ExpressVPN installed and I had a device management profile from my employer for access corporate Google profile.

I removed both, restarted the phone, used Reset Network Settings, didn't help :(

No other network-related apps installed, as far as I can tell.

Reply

Answer 7

Feb 9, 2025 7:50 PM in response to MrHoffman

Yeah, checked it too. I even tried manually setting some date in January (when I know it definitely worked) and it didn't fix the problem, so it doesn't seem to be expiring certificate problem. Looks like something had happened that made this certificate (or its root) untrusted a few days ago, maybe a bad iOS update?

No custom DNS or proxy settings. Tried to forget & reconnect to my WiFi, all settings are default, the problem is still present.

I really don't want to hard reset the iPhone, because there is a eSIM card from another country that I wouldn't be able to restore access to :(

Reply

Answer 8

Feb 9, 2025 7:29 PM in response to MrHoffman

None that I can think of, I don't have any device management profiles installed.

Reply

Answer 9

Feb 9, 2025 8:12 PM in response to MrHoffman

Yeah, I also noticed that it's Entrust, but most FAQ say Apple should support them until November 15, 2024, so that's surprising. Also, my friends can open the same websites (www.chase.com, bankofamerica.com) from same iPhones same iOS version.

Reply

HTTPS Not trusted error

Similar questions