An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Topic Options
#27172 - 10/24/13 07:02 AM Keychain Certificates
pbGuy Offline


Registered: 08/04/09
Loc: Portland, Oregon
While I don't venture too often into the Keychain utility, I've recently done so since installing Mavericks (which is running very smoothly on my system).

While in Keychain, I've noticed the Certificates with the little red x in the icon.

The x denotes the root Certificate is not to be trusted.

These Certificates all happen to be identified as com.Apple.xxx .

Can these Certificates be deleted safely or is it best to leave them as is?


Edited by pbGuy (10/24/13 10:51 AM)
_________________________
MBP15 i7 (2017) - 1TB PCIe-SSD - 10.15.6, iPhone X & iPadPro 11 WiFi, Watch4

Top
#27183 - 10/25/13 06:50 AM Re: Keychain Certificates [Re: pbGuy]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
without looking I can guess a bit. Those may be expired certificates. (old ones) that for some reason the system didn't remove when installing new ones. untrusted certs are not used by the system, they're basically ignored. I had several old iterations of my email pub/private key in my keychain recently, and mail stops using them the day they expire.
_________________________
I work for the Department of Redundancy Department

Top
#27186 - 10/25/13 01:34 PM Re: Keychain Certificates [Re: Virtual1]
pbGuy Offline


Registered: 08/04/09
Loc: Portland, Oregon
Do you think it Ok, or preferable, to delete them? Or, just leave them in place?
_________________________
MBP15 i7 (2017) - 1TB PCIe-SSD - 10.15.6, iPhone X & iPadPro 11 WiFi, Watch4

Top
#27187 - 10/25/13 03:18 PM Re: Keychain Certificates [Re: pbGuy]
joemikeb Offline

Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
The more certificates you have whether they are active or expired, the longer it takes to search for any one of them. On modern systems the time and CPU cycles used in the search are undetectable without sensitive tests so draw your own conclusions.
_________________________
joemikeb • moderator

Top
#27190 - 10/25/13 06:41 PM Re: Keychain Certificates [Re: pbGuy]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
Originally Posted By: pbGuy
Do you think it Ok, or preferable, to delete them? Or, just leave them in place?


expired certs are unusable. may as well delete them. but as said above, no rush
_________________________
I work for the Department of Redundancy Department

Top

Moderator:  alternaut, dkmarsh, joemikeb