You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

FIX for: "Safari can't verify the identity of the website" - certificate not valid

If you are getting a message like this:

Safari can't verify the identity of the website "static.ak.facebook.com" (or ANY other address)

This certificate is not valid (host name mismatch)

There is an EASY FIX for this...

Go to:

/Applications/Utilities/KeyChain Access

Select "KeyChain First Aid" from "KeyChain Access" (menu choice)

Make sure the radio button for "Verify" is selected, and then click the "Start" button.

Once completed, it will tell you if any problems were found just above "Verification Completed".

(In my case "no problems found").

It is not necessary to perform a "repair" if no problems were found.

If problems were found, follow up the verification process with the "repair" process.

FYI: "KeyChain Access" stores info for Certificates. If a "mismatch" occurs, or a certificate is deamed "invalid" you get a warning. (This is part of your security). Performing "KeyChain First Aid" will verify ALL certificates and correct any "mismatching" by updating the certificate OR will tell you there was a problem (ie. a website using a fake certificate), in which case you need to follow through with "repair" and if necessary, not use the problematic website. BUT, in most cases, this message is NOT about anything malicious, its just part of the security settings that are trying to ensure ALL certificates associated to ANY website is correct, and since certificates expire and/or get updated, these conflicts can occur.

MacBook, Mac OS X (10.6.8), White, Model A1342

Posted on Oct 24, 2012 1:31 AM

Top-ranking reply

canucksgirl01 Author

Level 1

57 points

Posted on Oct 24, 2012 2:04 PM

Here is the LATEST UPDATE:

The Akamai Network (the hosting service for many websites like Apple, Microsoft, Facebook and Twitter) which uses the a248.e.akamai.net URL (in this case for Facebook), has FINALLY become aware of this issue and is pushing out the fix as I type...

For everyone who was able to go through the KeyChain First Aid process (described above in the start of this thread) has been able to correct the problem already. For everyone else, the "fix" may take some time to populate over ALL the websites that are affected (i.e. millions...) so, you may have to be patient. I don't have specific help available for all iOS devices, but the update from Akamai will correct this problem.

*** Just be aware that websites have different schedules for when they push out updates. Some do this once a day, but others can do this as infrequently as once a week (depends on the website you're having trouble with).

View in context

112 replies

Jun 13, 2015 10:42 AM in response to BBobM

I had problems starting today. No solution yet. My problem started with trying to access itunes, at first "internet radio", then the store. I get the certificate warning that is being discussed. I then tried to access this forum from Safari and got the certificate warning there. However, with Firefox I am able to get access. My date and time is correct. I verified keychain access. I'm stumped.

And I can't access the App store to update either Safari (which I just updated) or iTunes.

MadMacs0

Level 5

5,227 points

Jun 13, 2015 9:18 PM in response to sevres-babylone

This discussion is almost three years old now and probably involves a completely different version of OS X and Safari. I wouldn't be surprised if there isn't anybody else monitoring it any more and I don't really know why I am.

Any time you can't find a solution in an old discussion, start a new one in order to attract new troubleshooters to it.You'll get better help faster that way. It's just how this forum works best.

Jan 31, 2016 5:38 PM in response to canucksgirl01

Check your date and time, time zone

pomme4moi

Level 2

167 points

Oct 21, 2016 10:57 AM in response to canucksgirl01

FYI that, at least in my case, there is no KeyChain First Aid option under KeyChain Access. However, I reset my keychain and it solved the "can't verify identity of website" error that I was getting on multiple sites in Safari.

ocn1602

Level 1

8 points

Oct 27, 2016 1:46 PM in response to pomme4moi

What do you mean by "reset my keychain"? I've been getting this issue in macOS Sierra lately but only for a few website, who then go on to not load properly, not display images, or redirect me to an ad... This is really annoying so I'm hoping to find a fix!

Thanks

pomme4moi

Level 2

167 points

Oct 27, 2016 2:49 PM in response to ocn1602

I followed the instructions here: Reset key chain

Hope it works for you too!

ocn1602

Level 1

8 points

Oct 27, 2016 3:01 PM in response to pomme4moi

Thanks for the quick reply! Does that delete all my saved passwords or just change the password I use to access them?

FIX for: "Safari can't verify the identity of the website" - certificate not valid