Originally Posted By: artie505
I wonder why OS X doesn't automatically clear expired certificates, and why System Roots expired certificates can only be hidden...not deleted?

Reasonable question.

I did a little research and it appears expired certificates can be reprovisioned. It would then follow that it might be necessary to reinstall the app if the certificate were deleted.

In El Capitan and previous versions of iOS there is provision for overriding expired or unrecognized certificates. I know that on Sierra (MacOS 12) those provisions still exist, but have been made less convenient. On iOS devices an app will NOT run without a current recognized certificate unless the device is jailbroken — at which point Apple disavows any and all responsibility. It would not surprise me if MacOS 13 followed the iOS model certainly that appears to be Apple's trajectory.

If we knew what it was we were doing, it wouldn't be called research, would it?

— Albert Einstein