Over the weekend, some customers using Macs may have started seeing expired or invalid certificate warnings when trying to use Sprout Social. This is a problem caused by an expired intermediate certificate issued by DigiCert, the company that Sprout Social and many other websites use to get SSL certificates.
This is not an issue with Sprout Social – we take extra steps to ensure that our SSL certificates do not expire to provide all customers with a secure user experience. Unfortunately, some Macs kept this expired certificate and stored it in their Keychain Access app. For now, the fix requires manually removing the expired certificate from your machine.
- Click the magnifying glass in the upper-right hand corner of your screen and type “Keychain Access” and hit Return.
- Click “View” in the menu bar at the top of your screen and select “Show Expired Certificates.”
- Use the search bar in the upper-right of the Keychain Access window and look for “digicert high.”
- Find the entry named “DigiCert High Assurance EV Root CA” that expired on July 26, 2014.
- Right click that entry and select “Delete ‘DigiCert High Assurance EV Root CA’.”
- Quit the Keychain Access app, restart your browser, and you should be set!
Samuel Axon: Samuel is the Editorial Director supervising Sprout Social's editorial and web content projects. He has years of experience in blogging and social media, having previously worked as an editor at social media and technology news sites Mashable and Engadget. He also helped build the white label web content management system Crowd Fusion from the ground up.
No results for "DigiCert High" ...
Apple keeps telling me to use another mail client, because Mac Mail is just so horrible. Why does it ask me to accept the new certificate for only 1 imap account and not the other 13 that run on the same server using the same cert? What a useless mail client.
So I did all that (but haven't deleted yet) and the weird thing is that my certificate actually has a 1999 expiry!
this is the third method I haver used to fix the problem, and it failed as well. There must be something else causing the certificate error.