Hello,
Jost to add to this, you can sort the certificates by using the table header 
command vo-verticleBar (or in C type languages or bar ). Then vo-space on the 
column you want. I found in my keychain I had an expired certificate for a boss 
that I stopped working for 10 years ago, and his certificate expired in 2010. I 
haven't talked to him in 5 years,. So I deleted that certificate hash from my 
keychain. I still have about 40 expired certificates in my login keychain, 
though I know there are some cases where these might still be useful, so I am 
leaving them alone.

                Best wishes,

Jonathan Cohn



> On Dec 23, 2020, at 21:14, 'Jason White' via MacVisionaries 
> <macvisionaries@googlegroups.com> wrote:
> 
> It appears you can delete it using Keychain Access:
> https://smallbusiness.chron.com/delete-untrusted-certificate-mac-56653.html 
> <https://smallbusiness.chron.com/delete-untrusted-certificate-mac-56653.html>
>  
> From: macvisionaries@googlegroups.com 
> <mailto:macvisionaries@googlegroups.com> <macvisionaries@googlegroups.com 
> <mailto:macvisionaries@googlegroups.com>> On Behalf Of Steve Matzura
> Sent: Wednesday, December 23, 2020 4:47 PM
> To: macvisionaries@googlegroups.com <mailto:macvisionaries@googlegroups.com>
> Subject: Re: SSL Certificate Madness (Rant)
>  
> Maybe this article 
> <https://css-tricks.com/getting-around-revoked-certificate-osx/> can help.
>  
> On 12/23/2020 4:02 PM, 'Janina Sajka' via MacVisionaries wrote:
>> <begin rant>
>>  
>> Yes, I need to spout off. If you don't care, stop reading!
>>  
>> I generally hold my Macs in high regard. But, at times they're downright
>> stupid.
>>  
>> I have a new SSL server certificate on my rednote.net <http://rednote.net/> 
>> server. It is
>> correctly setup, and Linux validation tools find it fully acceptable.
>>  
>> Thunderbird has no problem using it.
>>  
>> Android has no problem using it.
>>  
>> Both of my Macs are stumped. They're still hanging on to the old
>> certificate for dear life. If I show details, I can clearly see the old
>> certificate. My Mac informs me it's been revoked. No kidding, Sherlock?
>>  
>> Nor is it sufficient to delete the Internet Account / Mail identity and
>> create a new one, because the old certificate is buried in the tangle of
>> authentications that's in the Utilities folder, in the Keychain app.
>>  
>> Growl. I want to bite someone's nose off.
>>  
>> <end rant.
>>  
>> OK, I guess I feel a bit better now, but I still have the problem.
>>  
>> Best,
>>  
>> Janina
>>  
> -- 
> The following information is important for all members of the Mac Visionaries 
> list.
>  
> If you have any questions or concerns about the running of this list, or if 
> you feel that a member's post is inappropriate, please contact the owners or 
> moderators directly rather than posting on the list itself.
>  
> Your Mac Visionaries list moderator is Mark Taylor. You can reach mark at: 
> mk...@ucla.edu <mailto:mk...@ucla.edu> and your owner is Cara Quinn - you can 
> reach Cara at caraqu...@caraquinn.com <mailto:caraqu...@caraquinn.com>
>  
> The archives for this list can be searched at:
> http://www.mail-archive.com/macvisionaries@googlegroups.com/ 
> <http://www.mail-archive.com/macvisionaries@googlegroups.com/>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "MacVisionaries" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to macvisionaries+unsubscr...@googlegroups.com 
> <mailto:macvisionaries+unsubscr...@googlegroups.com>.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/macvisionaries/c23cce1f-0583-2a34-a7b1-bd55afde3b05%40noisynotes.com
>  
> <https://groups.google.com/d/msgid/macvisionaries/c23cce1f-0583-2a34-a7b1-bd55afde3b05%40noisynotes.com?utm_medium=email&utm_source=footer>.
> 
> -- 
> The following information is important for all members of the Mac Visionaries 
> list.
>  
> If you have any questions or concerns about the running of this list, or if 
> you feel that a member's post is inappropriate, please contact the owners or 
> moderators directly rather than posting on the list itself.
>  
> Your Mac Visionaries list moderator is Mark Taylor. You can reach mark at:  
> mk...@ucla.edu <mailto:mk...@ucla.edu> and your owner is Cara Quinn - you can 
> reach Cara at caraqu...@caraquinn.com <mailto:caraqu...@caraquinn.com>
>  
> The archives for this list can be searched at:
> http://www.mail-archive.com/macvisionaries@googlegroups.com/ 
> <http://www.mail-archive.com/macvisionaries@googlegroups.com/>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "MacVisionaries" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to macvisionaries+unsubscr...@googlegroups.com 
> <mailto:macvisionaries+unsubscr...@googlegroups.com>.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/macvisionaries/003101d6d99a%2485546560%248ffd3020%24%40jasonjgw.net
>  
> <https://groups.google.com/d/msgid/macvisionaries/003101d6d99a%2485546560%248ffd3020%24%40jasonjgw.net?utm_medium=email&utm_source=footer>.

-- 
The following information is important for all members of the Mac Visionaries 
list.

If you have any questions or concerns about the running of this list, or if you 
feel that a member's post is inappropriate, please contact the owners or 
moderators directly rather than posting on the list itself.

Your Mac Visionaries list moderator is Mark Taylor.  You can reach mark at:  
mk...@ucla.edu and your owner is Cara Quinn - you can reach Cara at 
caraqu...@caraquinn.com

The archives for this list can be searched at:
http://www.mail-archive.com/macvisionaries@googlegroups.com/
--- 
You received this message because you are subscribed to the Google Groups 
"MacVisionaries" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to macvisionaries+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/macvisionaries/CA2B5972-0D41-4C18-ADB7-005E4B3BB38A%40gmail.com.

Reply via email to