An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
Keychain Certificates
#27172 10/24/13 02:02 PM
Joined: Aug 2009
pbGuy Offline OP
OP Offline

Joined: Aug 2009
While I don't venture too often into the Keychain utility, I've recently done so since installing Mavericks (which is running very smoothly on my system).

While in Keychain, I've noticed the Certificates with the little red x in the icon.

The x denotes the root Certificate is not to be trusted.

These Certificates all happen to be identified as com.Apple.xxx .

Can these Certificates be deleted safely or is it best to leave them as is?

Last edited by pbGuy; 10/24/13 05:51 PM.

iMac 27 i7 (2020) - 2TB SSD - 10.15.6, iPhone X & iPadPro 11 WiFi, Watch4
Re: Keychain Certificates
pbGuy #27183 10/25/13 01:50 PM
Joined: Aug 2009
Offline

Joined: Aug 2009
without looking I can guess a bit. Those may be expired certificates. (old ones) that for some reason the system didn't remove when installing new ones. untrusted certs are not used by the system, they're basically ignored. I had several old iterations of my email pub/private key in my keychain recently, and mail stops using them the day they expire.


I work for the Department of Redundancy Department
Re: Keychain Certificates
Virtual1 #27186 10/25/13 08:34 PM
Joined: Aug 2009
pbGuy Offline OP
OP Offline

Joined: Aug 2009
Do you think it Ok, or preferable, to delete them? Or, just leave them in place?


iMac 27 i7 (2020) - 2TB SSD - 10.15.6, iPhone X & iPadPro 11 WiFi, Watch4
Re: Keychain Certificates
pbGuy #27187 10/25/13 10:18 PM
Joined: Aug 2009
Likes: 2
Moderator
Online
Moderator

Joined: Aug 2009
Likes: 2
The more certificates you have whether they are active or expired, the longer it takes to search for any one of them. On modern systems the time and CPU cycles used in the search are undetectable without sensitive tests so draw your own conclusions.


joemikeb • moderator
Re: Keychain Certificates
pbGuy #27190 10/26/13 01:41 AM
Joined: Aug 2009
Offline

Joined: Aug 2009
Originally Posted By: pbGuy
Do you think it Ok, or preferable, to delete them? Or, just leave them in place?


expired certs are unusable. may as well delete them. but as said above, no rush


I work for the Department of Redundancy Department

Moderated by  alternaut, dkmarsh, joemikeb 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.3.15 Page Time: 0.012s Queries: 24 (0.007s) Memory: 0.7169 MB (Peak: 0.7815 MB) Data Comp: Zlib Server Time: 2020-09-23 19:49:11 UTC
Valid HTML 5 and Valid CSS