FIX for: "Safari can't verify the identity of the website" - certificate not valid

Yes. Akamai Network is the hosting service for companies like Apple, Microsoft, Facebook and Twitter; and is responsible for the certificate (in this case, used by Facebook). They have apparently fixed the certificate to stop the alert message we all saw, but this change may not appear for ALL websites right away. Basically all the websites have to get the update from Akamai Network and then push the update through their website. Not all websites update their servers on the same schedule (some do this every day, some do this less often). So, if you could not fix the problem with the suggestions, you will have to wait for the affected sites to catch up with the update. ~ I hope that made more sense, and answered your question.

mozm97,

As I mentioned, you should first check for updates for your OS and install anything that pertains to security (if not already done). Installing Anti Virus software is an added level of security (the Apple updates are generally pushed after threats are found, but AV software deals with them asap). Just configure the software to run on a schedule that doesn't interfere with you using your system (as all software eats up system resources when they are running). You can specify what and where the software checks. I like it for downloads as Sophos will tell me immediately if something is hidden in the file (you just have to ensure the software also stays up to date).

So should you install it? Well, that's entirely up to you, but if it means anything (or not), I installed it as soon as I bought my MB... and I use my Mac for work and at home.

Can you be a bit more specific? Where and on what are you getting messages about certificate problems?

I suspect that you mean you are using a different device? or using a different browser? or an app?

Any connection that your device makes to a website, to a mail server, or an app, etc, goes through a 'behind the scenes' check to verify that the certificate associated is valid. A certificate is issued with a unique serial number that must correspond to the information verified through the issuer. It contains information about how the certificate is used (i.e.: for secure connections, or a general verification for the identity of the website or app). These certificates are also only valid from the issue date to the expiry date. So if you accidentally changed your device's date, you could get a bunch of certificate errors (because they are checked against your system's date). A note about each certificate is also saved to your device. This is NOT unique to Safari, to Mac's or just to computers. This exists on all levels of connections, with all devices and with all platforms.

If the error you are getting is the same as what's reported here, it affected a lot of people because the error in the certificate was used on potentially millions of websites. Safari users noticed this because the security is set up to alert you to any "mismatched" information contained in a certificate. As everything gets updated, the problem will get resolved on its own (but can take some time).

If you still suspect malware, I posted more information about this in this thread, you can read about it here. For any further help, I'll need some clarification from you about the problem (and posting a screenshot of the certificate notice you get, expanded to show the details, will also help).

Its hard to say exactly what prompted the certificate alerts when I don't know what you have installed, or how you have security configured. There are many applications that automatically check for updates etc that could prompt a message if their service was affected by this certificate (remembering that this includes Apple, Microsoft, Facebook and Twitter), and the connection doesn't have to be to any of those, they just have to have a 1st party certificate associated with the location being connected to. Obviously something tried to make a connection. Is it malware? Probably not. The part that you should feel more comfortable with is that the connection should not have continued as soon as the prompt showed up. So over the 18 or 24 hours your system sat idle, its possible that the particular program made repeated attempts to perform its update... I would go through your firewall settings (I'm assuming you have this through security), and specify what can access the internet (and blocking all else). On my Mac, I have the master password setup also to prevent ANY changes unless the password is provided... again, I assume you must have similar options in security. The other thing you may want to consider is not leaving your internet on while you are away.

Open up your keychain access (Applications > Utilities > Keychain Access) and then click on the menu option "Keychain Access" and select "Keychain First Aid" from the options. (see image)

I posted more information on how to fix this problem on this thread.