The iOS trusted certificate store contains a trusted root certificate preinstalled with iOS.
Https://support.apple.com/zh-cn/HT205205 about trusts and certificates
The IOS 9 trusted certificate store contains three types of certificates:
- A trusted root certificate is used to establish a chain of trust to validate other certificates that are signed by a trusted root, such as establishing a secure connection to a WEB server. When an IT administrator creates a configuration profile for an iPhone, IPad, or iPod touch, these trusted root certificates are not required.
- The certificate that is always queried is not trusted, but is not blocked. When you use one of the certificates, you are prompted to choose whether to trust the certificate.
- A blocked certificate is considered compromised and will no longer be trusted.
This article lists the certificate trust policies for IOS, which are updated as the list of certificates changes. You can tap Settings > General > About this computer to find the version of trusted certificate store installed on your IOS device. Scroll down to the bottom of the list to see the version of trusted certificate store.
This article lists the certificate for iOS trusted certificate store version 2015111600, which is the latest version of the certificate for iOS 9 and later.
A trusted certificate
Certificate name |
issued by |
type | Key
size |
Signature Algorithm |
Serial Number |
Expiry Time |
EV Policy |
A-trust-nqual-01 |
A-trust-nqual-01 |
Rsa |
2048 bits |
SHA-1 |
XX E2 42 |
23:00:00 Nov 30, 2014 |
Not EV |
List of trusted root certificates available in IOS 9