Results 1 to 4 of 4
  1. #1

    PGB1's Avatar
    Member Since
    Dec 05, 2008
    Location
    Detroit
    Posts
    342
    Specs:
    2007 Mac Book Pro 2.2 Ghz 4 GB RAM SSD OSX 10.11 & 2006 MBP Stuck At 10.6.8
    System Roots Certificates Question
    Hi
    I know this has been asked in the past, but I can't find a "Cast In Stone" answer here or in other places:
    In My Keychain, I have a lot of certificates. Some are for places I never went to (examples: Go Daddy, Taiwan Post, American Online, Equifax Global Business), some are expired & some are marked as not being trusted.

    Is it safe to ignore these? If not, should I delete them? (Which leads to the question"How?")

    I would not mind if I had to re-build the whole thing form scratch, just as if this was a brand new blank hard disk with a clean OS install. Is is possible to delete the whole list? How is that done?

    Thanks for the advice! It is appreciated.
    Paul

  2. #2

    MacsWork's Avatar
    Member Since
    May 22, 2005
    Location
    Closer than you think.
    Posts
    2,159
    Specs:
    Performa 6116 2GBSCSI 8MB OS 7.5.3
    Do not delete the system roots keychain entries. They are global signers that are used by secure sites that have paid to have a trusted authority sign their certificate. When ever you are on a secure site and are not prompted with a warning it is because the certificate used by the site was signed by a global signer and therefore verified by your browser.

    If you want to delete the Login keychain entries have at it. Anything in Login would have been put there by you.

  3. #3

    PGB1's Avatar
    Member Since
    Dec 05, 2008
    Location
    Detroit
    Posts
    342
    Specs:
    2007 Mac Book Pro 2.2 Ghz 4 GB RAM SSD OSX 10.11 & 2006 MBP Stuck At 10.6.8
    Thank You MacsWork
    I appreciate you taking the time to reply.

    Now the whole certificates in the keychain thing makes sense (I think).
    If I understand correctly- If the certificate says, for instance, Taiwan Post, it isn't necessary me having a certificate for Taiwan Post's web site; rather a company with a scure site I go to, such as a bank, paid Taiwan Post to issue a certificate for their (the bank's) secure site.
    Did I get it right?

  4. #4

    MacsWork's Avatar
    Member Since
    May 22, 2005
    Location
    Closer than you think.
    Posts
    2,159
    Specs:
    Performa 6116 2GBSCSI 8MB OS 7.5.3
    Being that you are from Detroit I doubt your bank is using a Taiwan Post signed certificate but yes,...you get the idea.

    A Taiwanese bank or business may use them. Since we're global now there is a need to recognize global signers.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Sytem Roots Certificates in Keychain App Questions
    By PGB1 in forum OS X - Operating System
    Replies: 0
    Last Post: 10-29-2014, 07:09 AM
  2. Certificates
    By ptb9896 in forum OS X - Operating System
    Replies: 7
    Last Post: 12-04-2013, 03:21 AM
  3. System Roots CA files
    By BeagleIL in forum OS X - Operating System
    Replies: 3
    Last Post: 09-30-2013, 01:45 PM
  4. Revisiting Mac Roots Help...
    By sdjohnso in forum Apple Desktops
    Replies: 3
    Last Post: 04-11-2008, 03:42 PM
  5. SSL Certificates
    By rocco in forum Web Design and Hosting
    Replies: 6
    Last Post: 06-13-2006, 08:16 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •