Available trusted root certificates for Apple operating systems

Trust Stores contains trusted root certificates that are preinstalled with iOS, iPadOS, macOS, tvOS, and watchOS.

About trust and certificates

Each Trust Store may contain up to three categories of certificates:

  • Trusted certificates establish a chain of trust that verifies other certificates signed by the trusted roots — for example, to establish a secure connection to a web server. When IT administrators create Configuration Profiles, these trusted root certificates don't need to be included.

  • Always Ask certificates are untrusted but not blocked. When one of these certificates is used, you'll be prompted to choose whether or not to trust it.

  • Blocked certificates are believed to be compromised and will never be trusted.

Current Trust Store

List of available trusted root certificates in iOS 17, iPadOS 17, macOS 14, tvOS 17, and watchOS 10

Previous shared Trust Stores

Beginning with iOS 12, macOS 10.14, tvOS 12, and watchOS 5, all four Apple operating systems use a shared Trust Store. As the Trust Store version is updated, previous versions are archived here:

Archived Trust Stores

iOS

macOS

watchOS

tvOS

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.

Published Date: