On diawi.com and all our subdomains, we use Let's Encrypt to generate SSL certificates and provide navigation through secure HTTPS connexions. However, on September 30, 2021, the root certificate used by Let's Encrypt to sign their SSL certificates has expired on some older systems like macOS <10.12.1.
To continue using Diawi (and many many other websites) on those older macOS computers, there is a solution!
When you navigate to diawi.com with Safari, if you get a security error like NET::ERR_CERT_DATE_INVALID: you are affected. You could temporarily accept the SSL exception in Safari, but the error will appear again later and on each of our subdomains, which is not practical.
In order to visit Diawi and install apps, the solution is to download and install the new root certificate manually.
- Download it from the official Let's Encrypt address: https://letsencrypt.org/certs/isrgrootx1.der => save it as a file, don't open Keychain if the system suggests it
- Open the certificate by double-clicking the isrgrootx1.der file in the Finder
- You'll get an "Add Certificates" dialog asking to add it to your keychain. Choose "system" to make it available to all users on your mac.
- Click "Add".
- In the Keychain Access search box, type "ISRG" to find the
ISRG Root X1you just installed, be sure to select the system keychain in the list on the left. - Double-click to open it.
- In the dialog box, expand the "Trust" area and in "When using this certificate", change "Use System Defaults" to "Always Trust". This will change all the other items selections.
- Close the dialog box and apply it (you'll need to use your login/password as it is a system change)
That's it. The new certificate is valid until 2035 and you are able to continue using Diawi.
