security dump-trust-settings Number of trusted certs = 2 Cert 0: Apple Root CA Number of trust settings : 10 Trust Setting 0: Policy OID : SSL Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 1: Policy OID : SSL Allowed Error : Host name mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 2: Policy OID : SMIME Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 3: Policy OID : SMIME Allowed Error : S/MIME Email address mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 4: Policy OID : EAP Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 5: Policy OID : IPSec Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 6: Policy OID : Code Signing Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 7: Policy OID : Unknown OID length 9, value { 2A 86 48 86 F7 63 64 01 14 } Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 8: Policy OID : Apple X509 Basic Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 9: Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Cert 1: Apple Worldwide Developer Relations Certification Authority Number of trust settings : 10 Trust Setting 0: Policy OID : SSL Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 1: Policy OID : SSL Allowed Error : Host name mismatch Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 2: Policy OID : SMIME Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 3: Policy OID : SMIME Allowed Error : S/MIME Email address mismatch Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 4: Policy OID : EAP Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 5: Policy OID : IPSec Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 6: Policy OID : Code Signing Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 7: Policy OID : Unknown OID length 9, value { 2A 86 48 86 F7 63 64 01 14 } Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 8: Policy OID : Apple X509 Basic Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot Trust Setting 9: Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustAsRoot security dump-trust-settings -d Number of trusted certs = 2 Cert 0: Apple Root CA - G2 Number of trust settings : 10 Trust Setting 0: Policy OID : SSL Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 1: Policy OID : SSL Allowed Error : Host name mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 2: Policy OID : SMIME Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 3: Policy OID : SMIME Allowed Error : S/MIME Email address mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 4: Policy OID : EAP Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 5: Policy OID : IPSec Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 6: Policy OID : Code Signing Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 7: Policy OID : Unknown OID length 9, value { 2A 86 48 86 F7 63 64 01 14 } Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 8: Policy OID : Apple X509 Basic Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 9: Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Cert 1: Apple Root CA - G3 Number of trust settings : 10 Trust Setting 0: Policy OID : SSL Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 1: Policy OID : SSL Allowed Error : Host name mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 2: Policy OID : SMIME Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 3: Policy OID : SMIME Allowed Error : S/MIME Email address mismatch Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 4: Policy OID : EAP Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 5: Policy OID : IPSec Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 6: Policy OID : Code Signing Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 7: Policy OID : Unknown OID length 9, value { 2A 86 48 86 F7 63 64 01 14 } Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 8: Policy OID : Apple X509 Basic Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot Trust Setting 9: Allowed Error : CSSMERR_TP_CERT_EXPIRED Result Type : kSecTrustSettingsResultTrustRoot security dump-trust-settings -s Number of trusted certs = 153 Cert 0: Go Daddy Root Certificate Authority - G2 Number of trust settings : 0 Cert 1: HARICA TLS ECC Root CA 2021 Number of trust settings : 0 Cert 2: NAVER Global Root Certification Authority Number of trust settings : 0 Cert 3: DigiCert TLS ECC P384 Root G5 Number of trust settings : 0 Cert 4: Sectigo Public Time Stamping Root R46 Number of trust settings : 0 Cert 5: OISTE WISeKey Global Root GA CA Number of trust settings : 0 Cert 6: Trustwave Global ECC P384 Certification Authority Number of trust settings : 0 Cert 7: Actalis Authentication Root CA Number of trust settings : 0 Cert 8: D-TRUST Root CA 3 2013 Number of trust settings : 0 Cert 9: Apple Root CA - G2 Number of trust settings : 0 Cert 10: SSL.com EV Root Certification Authority ECC Number of trust settings : 0 Cert 11: GlobalSign Number of trust settings : 0 Cert 12: DigiCert SMIME RSA4096 Root G5 Number of trust settings : 0 Cert 13: Hellenic Academic and Research Institutions RootCA 2015 Number of trust settings : 0 Cert 14: ePKI Root Certification Authority Number of trust settings : 0 Cert 15: AAA Certificate Services Number of trust settings : 0 Cert 16: VeriSign Class 3 Public Primary Certification Authority - G5 Number of trust settings : 0 Cert 17: SSL.com TLS RSA Root CA 2022 Number of trust settings : 0 Cert 18: Apple Root CA - G3 Number of trust settings : 0 Cert 19: IdenTrust Public Sector Root CA 1 Number of trust settings : 0 Cert 20: QuoVadis Root CA 3 G3 Number of trust settings : 0 Cert 21: ACCVRAIZ1 Number of trust settings : 0 Cert 22: Buypass Class 3 Root CA Number of trust settings : 0 Cert 23: Starfield Services Root Certificate Authority - G2 Number of trust settings : 0 Cert 24: Atos TrustedRoot Root CA RSA TLS 2021 Number of trust settings : 0 Cert 25: SSL.com TLS ECC Root CA 2022 Number of trust settings : 0 Cert 26: TrustCor ECA-1 Number of trust settings : 0 Cert 27: AffirmTrust Commercial Number of trust settings : 0 Cert 28: GlobalSign Root E46 Number of trust settings : 0 Cert 29: HARICA TLS RSA Root CA 2021 Number of trust settings : 0 Cert 30: Hongkong Post Root CA 3 Number of trust settings : 0 Cert 31: Sectigo Public Server Authentication Root E46 Number of trust settings : 0 Cert 32: Certainly Root R1 Number of trust settings : 0 Cert 33: QuoVadis Root CA 1 G3 Number of trust settings : 0 Cert 34: GlobalSign Secure Mail Root E45 Number of trust settings : 0 Cert 35: Atos TrustedRoot Root CA ECC G2 2020 Number of trust settings : 0 Cert 36: Network Solutions Certificate Authority Number of trust settings : 0 Cert 37: Visa Information Delivery Root CA Number of trust settings : 0 Cert 38: ISRG Root X1 Number of trust settings : 0 Cert 39: XRamp Global Certification Authority Number of trust settings : 0 Cert 40: TrustCor RootCert CA-2 Number of trust settings : 0 Cert 41: Certum EC-384 CA Number of trust settings : 0 Cert 42: SSL.com Client RSA Root CA 2022 Number of trust settings : 0 Cert 43: D-TRUST Root Class 3 CA 2 EV 2009 Number of trust settings : 0 Cert 44: Sectigo Public Email Protection Root R46 Number of trust settings : 0 Cert 45: OISTE WISeKey Global Root GB CA Number of trust settings : 0 Cert 46: ComSign Global Root CA Number of trust settings : 0 Cert 47: Izenpe.com Number of trust settings : 0 Cert 48: COMODO Certification Authority Number of trust settings : 0 Cert 49: TrustCor RootCert CA-1 Number of trust settings : 0 Cert 50: GlobalSign Number of trust settings : 0 Cert 51: AC RAIZ FNMT-RCM Number of trust settings : 0 Cert 52: DigiCert Trusted Root G4 Number of trust settings : 0 Cert 53: TWCA Root Certification Authority Number of trust settings : 0 Cert 54: Starfield Class 2 Certification Authority Number of trust settings : 0 Cert 55: HARICA Client RSA Root CA 2021 Number of trust settings : 0 Cert 56: SecureTrust CA Number of trust settings : 0 Cert 57: Entrust Root Certification Authority - G2 Number of trust settings : 0 Cert 58: DigiCert TLS RSA4096 Root G5 Number of trust settings : 0 Cert 59: Baltimore CyberTrust Root Number of trust settings : 0 Cert 60: HARICA Client ECC Root CA 2021 Number of trust settings : 0 Cert 61: CA Disig Root R2 Number of trust settings : 0 Cert 62: GlobalSign Root CA Number of trust settings : 0 Cert 63: QuoVadis Root CA 2 G3 Number of trust settings : 0 Cert 64: DigiCert Assured ID Root CA Number of trust settings : 0 Cert 65: DigiCert Assured ID Root G3 Number of trust settings : 0 Cert 66: Trustwave Global Certification Authority Number of trust settings : 0 Cert 67: SSL.com Client ECC Root CA 2022 Number of trust settings : 0 Cert 68: GDCA TrustAUTH R5 ROOT Number of trust settings : 0 Cert 69: T-TeleSec GlobalRoot Class 2 Number of trust settings : 0 Cert 70: T-TeleSec GlobalRoot Class 3 Number of trust settings : 0 Cert 71: DigiCert Assured ID Root G2 Number of trust settings : 0 Cert 72: Security Communication RootCA2 Number of trust settings : 0 Cert 73: Entrust.net Certification Authority (2048) Number of trust settings : 0 Cert 74: AffirmTrust Networking Number of trust settings : 0 Cert 75: Autoridad de Certificacion Firmaprofesional CIF A62634068 Number of trust settings : 0 Cert 76: Amazon Root CA 3 Number of trust settings : 0 Cert 77: DigiCert SMIME ECC P384 Root G5 Number of trust settings : 0 Cert 78: Amazon Root CA 2 Number of trust settings : 0 Cert 79: Atos TrustedRoot Root CA ECC TLS 2021 Number of trust settings : 0 Cert 80: AffirmTrust Premium ECC Number of trust settings : 0 Cert 81: Apple Root Certificate Authority Number of trust settings : 0 Cert 82: SwissSign Gold CA - G2 Number of trust settings : 0 Cert 83: Go Daddy Class 2 Certification Authority Number of trust settings : 0 Cert 84: SSL.com Root Certification Authority ECC Number of trust settings : 0 Cert 85: CFCA EV ROOT Number of trust settings : 0 Cert 86: certSIGN ROOT CA G2 Number of trust settings : 0 Cert 87: OISTE WISeKey Global Root GC CA Number of trust settings : 0 Cert 88: Amazon Root CA 1 Number of trust settings : 0 Cert 89: Buypass Class 2 Root CA Number of trust settings : 0 Cert 90: ISRG Root X2 Number of trust settings : 0 Cert 91: emSign Root CA - G1 Number of trust settings : 0 Cert 92: GeoTrust Primary Certification Authority - G2 Number of trust settings : 0 Cert 93: TWCA Global Root CA Number of trust settings : 0 Cert 94: Secure Global CA Number of trust settings : 0 Cert 95: Amazon Root CA 4 Number of trust settings : 0 Cert 96: Certum Trusted Network CA 2 Number of trust settings : 0 Cert 97: AffirmTrust Premium Number of trust settings : 0 Cert 98: SwissSign Silver CA - G2 Number of trust settings : 0 Cert 99: Atos TrustedRoot Root CA RSA G2 2020 Number of trust settings : 0 Cert 100: NetLock Arany (Class Gold) Főtanúsítvány Number of trust settings : 0 Cert 101: emSign ECC Root CA - G3 Number of trust settings : 0 Cert 102: Sectigo Public Email Protection Root E46 Number of trust settings : 0 Cert 103: HiPKI Root CA - G1 Number of trust settings : 0 Cert 104: Apple Root CA Number of trust settings : 0 Cert 105: Chambers of Commerce Root - 2008 Number of trust settings : 0 Cert 106: Certum Trusted Root CA Number of trust settings : 0 Cert 107: COMODO ECC Certification Authority Number of trust settings : 0 Cert 108: GlobalSign Secure Mail Root R45 Number of trust settings : 0 Cert 109: GTS Root R1 Number of trust settings : 0 Cert 110: TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 Number of trust settings : 0 Cert 111: Trustwave Global ECC P256 Certification Authority Number of trust settings : 0 Cert 112: Entrust Root Certification Authority - EC1 Number of trust settings : 0 Cert 113: Entrust Root Certification Authority Number of trust settings : 0 Cert 114: Atos TrustedRoot 2011 Number of trust settings : 0 Cert 115: D-TRUST Root Class 3 CA 2 2009 Number of trust settings : 0 Cert 116: DigiCert High Assurance EV Root CA Number of trust settings : 0 Cert 117: Certum Trusted Network CA Number of trust settings : 0 Cert 118: Sectigo Public Server Authentication Root R46 Number of trust settings : 0 Cert 119: GlobalSign Root R46 Number of trust settings : 0 Cert 120: Global Chambersign Root - 2008 Number of trust settings : 0 Cert 121: Telia Root CA v2 Number of trust settings : 0 Cert 122: IdenTrust Commercial Root CA 1 Number of trust settings : 0 Cert 123: GTS Root R2 Number of trust settings : 0 Cert 124: GlobalSign Number of trust settings : 0 Cert 125: Entrust Root Certification Authority - G4 Number of trust settings : 0 Cert 126: GlobalSign Number of trust settings : 0 Cert 127: TeliaSonera Root CA v1 Number of trust settings : 0 Cert 128: COMODO RSA Certification Authority Number of trust settings : 0 Cert 129: GTS Root R3 Number of trust settings : 0 Cert 130: SSL.com Root Certification Authority RSA Number of trust settings : 0 Cert 131: Cisco Root CA 2048 Number of trust settings : 0 Cert 132: certSIGN ROOT CA Number of trust settings : 0 Cert 133: SSL.com EV Root Certification Authority RSA R2 Number of trust settings : 0 Cert 134: USERTrust ECC Certification Authority Number of trust settings : 0 Cert 135: Security Communication ECC RootCA1 Number of trust settings : 0 Cert 136: Microsec e-Szigno Root CA 2009 Number of trust settings : 0 Cert 137: Microsoft ECC Root Certificate Authority 2017 Number of trust settings : 0 Cert 138: Certigna Number of trust settings : 0 Cert 139: GLOBALTRUST 2020 Number of trust settings : 0 Cert 140: GTS Root R4 Number of trust settings : 0 Cert 141: QuoVadis Root CA 3 Number of trust settings : 0 Cert 142: DigiCert Global Root G2 Number of trust settings : 0 Cert 143: Sectigo Public Time Stamping Root E46 Number of trust settings : 0 Cert 144: Starfield Root Certificate Authority - G2 Number of trust settings : 0 Cert 145: Hellenic Academic and Research Institutions ECC RootCA 2015 Number of trust settings : 0 Cert 146: DigiCert Global Root CA Number of trust settings : 0 Cert 147: DigiCert Global Root G3 Number of trust settings : 0 Cert 148: Certainly Root E1 Number of trust settings : 0 Cert 149: QuoVadis Root CA 2 Number of trust settings : 0 Cert 150: Certum CA Number of trust settings : 0 Cert 151: USERTrust RSA Certification Authority Number of trust settings : 0 Cert 152: Microsoft RSA Root Certificate Authority 2017 Number of trust settings : 0