How to Update the Certificate Trust Store on Apple Devices

Select Language:

If you’re using macOS 13 (Ventura) and need to update your keychain to recognize the new Sectigo root and intermediate certificates, here’s a simple step-by-step guide that could help. Keep in mind, this process is based on trial and error and may not be perfect for everyone.

First, open the Keychain Access app. You can find it in your Applications folder under Utilities. Once open, select the “System” keychain. This is where you’ll add the new certificates.

Next, you need to get the necessary certificates. Start by opening Safari and go to Sectigo’s support page at this link: Sectigo Certificates. Download the file called “Sectigo RSA Domain Validation CA Bundle,” which contains the intermediate certificates. When the download finishes, find the file in Finder, and rename it by adding the “.crt” extension at the end. This makes it easier to import.

To view what’s in the certificate file, you can use the Quick Look feature in Finder. When importing it into Keychain Access, hold down the space bar after selecting the file to see its contents. You should see details like in this example:

[Insert screenshot of viewable certificate details]

Now, go back to the same process to download Sectigo’s root certificate: “Root Sectigo Public Server Authentication Root R46 7/22/2025,” available here: Sectigo Root. After downloading, add “.crt” to the filename and use Quick Look to verify its contents, similar to before.

With both files ready, import them into your Keychain. In Keychain Access, click File > Import Items, then select both the intermediate and root certificate files.

Once imported, you’ll see the certificates listed. Select the root certificate, then open Get Info for that item. You’ll notice it’s marked as untrusted (a red ❌ icon). To fix this, click the “Trust” section and choose “Always Trust.” However, if prompted, enter your administrator password to confirm the change. After trusting it, you should see a plus sign (+) in a blue circle over the certificate, indicating success.

Remember, this process was pieced together after some research on Sectigo’s website, so results might vary depending on your specific setup. Feel free to leave comments with your experiences or ask questions. This method might need adjustments to fit your needs, but it offers a starting point for updating your trust store on macOS 13.