Available trusted root certificates for Apple operating systems

Trust Stores contains trusted root certificates that are preinstalled with iOS, iPadOS, macOS, tvOS and watchOS.

About trust and certificates

Each Trust Store contains three categories of certificate:

  • Trusted certificates establish a chain of trust that verifies other certificates signed by the trusted roots – for example, to establish a secure connection to a web server. When IT administrators create Configuration Profiles, these trusted root certificates don't need to be included.

  • Always Ask certificates are untrusted but not blocked. When one of these certificates is used, you'll be prompted to choose whether or not to trust it.

  • Blocked certificates are believed to be compromised and will never be trusted.

Current Trust Store

List of available trusted root certificates in iOS 15.1, iPadOS 15.1, macOS 12.1, tvOS 15.1 and watchOS 8.1

Previous shared Trust Stores

Beginning with iOS 12, macOS 10.14, tvOS 12 and watchOS 5, all four Apple operating systems use a shared Trust Store. As the Trust Store version is updated, previous versions are archived here:

Archived Trust Stores

iOS

macOS

watchOS

tvOS

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: