In the Keychain Access app on your Mac, select either the login or System keychain. You can add certificates to your keychain for quick access to secure websites and other resources. A certificate file can be shared between computers. Add certificates to a keychain using Keychain Access on Mac. More information on Java’s PKI capabilities is available in the Java and Public Key Enabling brief. Once you delete those, your list will be much smaller! For alternate operating systems such as Mac OS and Linux, certificates can be imported from the PKCS7 files (For DoD PKI Only, For ECA PKI Only, For JITC PKI Only, For SIPR PKI Only.Download available on SIPRNet Only.

The other certs are intermediate certs Safari does not need them, so you should delete all of the “DOD EMAIL”, “DOD ID SW”, and “DOD SW” certs. Seriously, if these kinds of certificates are valid, I would like to know what websites use them so I can avoid them in the future.ĭoes anyone have any comment or suggestions regarding these? Thanks.The four certs that we want are named “DoD Root CA” followed by a number (2, 3, 4, or 5).

Just because they are valid, one never knows what is truly “necessary” and why they are there. They look suspicious to me and I’m reluctant to use the keychain and I’m very tempted to remove Apple Pay from my iPhone because of these. One expires Sep16, 2015 and the other Dec 22, 2017Īlthough I make an assumption that I must have clicked on something that enabled these, I cannot say with certainty whether I did nor not. One is listed as “TÜBITAK UEKAE Kök Sertifica Hizmet Saglayicisi - Sürüm 3” in addition to two others with the same name, “TÜRKTRUST Elektronik Sertifika Hizmet Saglayicisi”. There are four more that appear suspicious to me also. It evaluates as “Generic (Certificate chain validation only). I love Apple products as I'm sure you do, but that doesn't mean we have to 'settle' for certificates we know nothing about.Īfter opening Keychain Access and viewing the System Roots Certificates, I find one entitled, “China internet information Center EV Certificates Root”. I hope this helps for those who may have experienced the same issue and found a solution other than to blindly follow the sheep/Apple.

This is additional information to my original query.

Can i delete dod root certificates mac