Available root certificates for Apple operating systems
Root Stores contain Root CA Certificates that are preinstalled with iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
About certificates
Root CA Certificates establish a validation chain that verifies other certificates signed by the included roots — for example, to establish a secure connection to a web server. When IT administrators create Configuration Profiles, these Root CA Certificates don't need to be included.
Current Root Store
Previous shared Root Stores
Beginning with iOS 12, macOS 10.14, tvOS 12, and watchOS 5, all Apple operating systems use a shared Root Store. As the Root Store version is updated, previous versions are archived here:
List of available root certificates in iOS 17, iPadOS 17, macOS 14, tvOS 17, and watchOS 10
List of available trusted root certificates in iOS 16, iPadOS 16, macOS 13, tvOS 16, and watchOS 9
List of available trusted root certificates in iOS 15, iPadOS 15, macOS 12, tvOS 15, and watchOS 8
List of available trusted root certificates in iOS 14.0, macOS 11.0, tvOS 14.0, and watchOS 7.0
List of available trusted root certificates in iOS 13.4, macOS 10.15.4, tvOS 13.4, and watchOS 6.2
List of available trusted root certificates in iOS 12, macOS 10.14, tvOS 12, and watchOS 5
Archived Root Stores
iOS
macOS
List of available trusted root certificates in macOS High Sierra
List of available trusted root certificates in OS X El Capitan
List of available trusted root certificates in OS X Yosemite
List of available trusted root certificates in OS X Mavericks
watchOS
tvOS
Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.