Untrusted Cert Title Error MacBook: Fixes

If you see an “untrusted certificate� error on your MacBook, it means macOS does not trust the digital certificate presented by the website or server you are trying to reach. This guide explains why the error appears and walks you through the safe ways to resolve it, from checking your system date to installing a missing root certificate.

What Does “Untrusted Certificate� Mean?

When you connect to a secure website (HTTPS), the server sends a digital certificate to verify its identity. macOS checks this certificate against a list of trusted Certificate Authorities (CAs) stored in your Keychain. If the certificate is self-signed, expired, issued by an unknown CA, or the domain name doesn’t match, macOS shows a warning like “This connection is not private� or “Untrusted certificate.�

The error is a security feature, not a bug. It prevents you from sending data to a server that might be impersonating the real site. However, it can also appear for legitimate reasons—such as a misconfigured home server, a corporate proxy, or an outdated system clock.

Common Causes of the Error

• System date and time are wrong – Certificates have a validity period. If your Mac’s clock is set to a date outside that window, every certificate looks invalid.
• Missing intermediate or root certificate – Some servers only send their own certificate, not the chain that ties it to a trusted root. macOS may not have the required intermediate stored locally.
• Self-signed certificates – Used by many internal tools, development servers, and IoT devices. They are not signed by a public CA, so macOS doesn’t trust them by default.
• Expired certificate – The site’s certificate has passed its expiration date and hasn’t been renewed.
• Domain mismatch – The certificate was issued for a different hostname than the one you typed.
• Corporate or VPN proxy – Security software or a proxy intercepts HTTPS traffic and presents its own certificate, which your Mac doesn’t trust.

How to Fix the Error Safely

Follow these steps in order. Stop after the one that resolves the issue.

1. Check your date and time. Go to System Settings → General → Date & Time. Turn on “Set time and time zone automatically.� If it’s already on, turn it off and on again, then restart Safari.
2. Try a different browser. If Chrome or Firefox loads the site without warning, the problem is likely Safari’s certificate store. You can either use that browser or proceed to the next step.
3. Inspect the certificate. In Safari, click the “Show Details� button in the warning page. Look at the “Issuer� and “Expires� fields. If the issuer is a well-known CA (like Let’s Encrypt, DigiCert, or GlobalSign) and the date is in the future, the problem is likely a missing intermediate certificate.
4. Install the missing intermediate certificate. If you know the issuer, go to the CA’s website and download the intermediate certificate (often named “Root CA� or “Intermediate CA�). Double-click the file to add it to your Keychain. Then open Keychain Access (in Utilities), find the certificate, and set “Trust� to “Always Trust.�
5. For self-signed certificates (internal tools only): If you are certain the server is legitimate (e.g., your own NAS or a dev server), you can manually trust the certificate. In Safari, click “Show Details� → “Visit this website.� In Chrome, click “Advanced� → “Proceed.� For a permanent fix, add the certificate to your Keychain and set it to “Always Trust.�
6. Disable HTTPS proxy (if you use one). If you are behind a corporate proxy or VPN, the proxy may be injecting its own certificate. Contact your IT department—do not disable proxy security yourself unless you understand the risk.

How to Manually Trust a Certificate in Keychain

If you need to trust a specific certificate permanently, use Keychain Access:

1. Open Keychain Access (Applications → Utilities).
2. In the top-left, select the “System� keychain.
3. Find the certificate you want to trust (you may need to import it first via File → Import Items).
4. Double-click the certificate, expand “Trust,� and set “When using this certificate� to “Always Trust.�
5. Close the window and enter your password when prompted.

Be cautious: trusting a certificate means you are telling macOS to accept that server’s identity without question. Only do this for certificates you have verified, such as those from your own organization or device.

What NOT to Do

• Don’t disable certificate validation globally. This would leave you vulnerable to man-in-the-middle attacks on all sites.
• Don’t ignore the warning on public Wi-Fi. An untrusted certificate on a coffee shop network could be a hacker intercepting your traffic.
• Don’t install random “fix certificate� tools. Many are malware. Stick to built-in macOS tools or official CA downloads.
• Don’t set the clock manually to bypass the error. That only masks the problem and can break other services.

When the Error Persists

If you’ve checked the date, tried another browser, and still see the error, the site’s certificate is likely genuinely invalid. You can verify this by using an online SSL checker (search for “SSL checker� and enter the domain). If the checker reports an expired or mismatched certificate, the site owner needs to fix it—you cannot do anything on your end.

For corporate or school networks, the error may be caused by a security filter that requires you to install a profile. Ask your IT administrator for the correct certificate or configuration profile. Do not attempt to bypass it on your own.

Frequently Asked Questions

Why does my MacBook say “untrusted certificate� for Google but not for other sites?

If only one site fails, the problem is usually that site’s certificate, not your Mac. However, if Google fails but other sites work, check your date and time first—Google’s certificates are extremely reliable, so a date error is the most common cause. Also check if you have any VPN or proxy software that might be intercepting traffic.

Can I click “Proceed� or “Visit Website� safely?

Only if you are absolutely sure the site is legitimate. For example, if you are accessing your own router’s admin page or a development server, it’s probably fine. On public networks or for unfamiliar sites, do not proceed—close the tab instead.

How do I find the missing intermediate certificate?

Look at the certificate details in the browser warning. Note the “Issuer� name. Go to that CA’s official website and search for “intermediate certificate� or “certificate chain.� Download the appropriate file (usually a .crt or .pem). Install it into Keychain Access as described above.

Will resetting the Keychain help?

Resetting the Keychain (deleting all certificates) is a last resort and can break other applications. It will not fix a site’s invalid certificate. Only try this if you have a backup and know how to restore it.

Does this error mean my Mac has a virus?

Not necessarily. It’s a standard security warning. However, if you see it on many sites unexpectedly, it could indicate a malicious proxy or a compromised network. Run a malware scan with a reputable tool, and check your network settings for unknown proxies.

Why does the error appear in Safari but not Chrome?

Safari uses the macOS Keychain for certificate trust, while Chrome and Firefox use their own certificate stores (though Chrome on macOS also uses the Keychain for some checks). If only Safari complains, the certificate may be missing from the Keychain but present in Chrome’s store. You can try importing the certificate into the Keychain to fix Safari.

Related

• Fix Windows 10 Control Panel Not Opening (Step-by-Step)
• Privacy Settings Android: Complete Guide
• Stop Windows From Being Opened: 7 Ways