This certificate has an invalid issuer Apple Push

Question

I have created certificate to enable Push Services in my app, but every time I try to add certificate in my Keychain, after adding certificate it shows me following error:

This certificate has an invalid issuer

Answer 1

If you are facing the "This certificate has an invalid issuer" error for all your certificates then do the following steps.

Steps:

• Open Keychain and Click on Login -> All Items from the left panel.
• Now, Click on View -> Show Expired Certificates from the top navigation menu.
• Now search for "Apple Worldwide Developer Relations Certification Authority" and delete expired certificates.
• After deleting expired certificates, visit the following URL and download the new certificate, https://developer.apple.com/certificationauthority/AppleWWDRCA.cer.
• Double click on the newly downloaded certificate, and install it in your keychain.
• Double check: List expired certificates by following step number 3.
• Now you have a valid "Apple Worldwide Developer Relations Certification Authority" having expiry date 2023-02-07.

Reference:

• Apple Worldwide Developer Relations Intermediate Certificate Expiration

Answer 2

You need to search the World from the top right search bar and delete the expired certificate. Make sure you selected Login and All items.

Answer 3

• All my certificates are installed and expire dates are fine.
• I deleted and reinstalled all my certificates, still no luck

In the end, I right-clicked on the certificate, and selected "Get Info". Under the Trust section, I selected "Always Trust" and this solved my problem.

Answer 4

In Apple's Developer's portal, add a new certificate, and when asked "What type of certificate do you need?" choose "WorldWide developer relations certificate". Generate the new certificate, download and install. The moment you do that, you will no longer see the message you have described.

Edit:
The certificate can be downloaded from the following page: https://www.apple.com/certificateauthority/ You can choose one of the following two certificates: "WWDR Certificate (Expiring 02/07/23)" or "WWDR Certificate (Expiring 02/14/16)"

Answer 5

As described in the Apple Worldwide Developer Relations Intermediate Certificate Expiration:

---

The previous Apple Worldwide Developer Relations Certification Intermediate Certificate expired on February 14, 2016 and the renewed certificate must now be used when signing Apple Wallet Passes, push packages for Safari Push Notifications, Safari Extensions, and submissions to the App Store, Mac App Store, and App Store for Apple TV.

All developers should download and install the renewed certificate on their development systems and servers. All apps will remain available on the App Store for iOS, Mac, and Apple TV.

---

The new valid certificate will look like the following:

It will display (this certificate is valid) with a green mark.

So, go to your Key Chain Access. Just delete the old certificate and replace it with the new one (renewed certificate) as Apple described in the document. Mainly the problem is only with the Apple push notification service and extensions as described in the Apple document.

You can also check the listing of certificates in https://www.apple.com/certificateauthority/

Certificate Revocation List:

Now this updated certificate will expire on 2023-02-08.

---

If you could not see the old certificate then go to the System Keychains and from edit menu and select the option Show Expired Certificates.

Now you can see the following certificate that you have to delete:

Answer 6

Just try to set local date earlier than Feb 14. Works for me! Not a complete solution but temporary solve the problem.