Expiring Soon - Worldwide Developer Relations Certificate

Apple just published an updated one on their site:

https://www.apple.com/certificateauthority/

Just swap the expiring one out with the new one and you should be good to go.

I downloaded the new WWDR certificate. However, the IOS developer and distribution certificates are being flagged with "This certificate has an invalid issuer". Even on newly downloaded certificates. Anyone else having problems? Or any thoughts on how to fix it. When I try to sign my app I get "Missing iOS Distribution signing identity"

I'm having the same problem. I've tried clearing out all the old expired certs that I have. Downloaded the new WWDR one. Recreated my dev and dist certs. Recreated provisioning profiles. My dev and dist certs say "This certificate has an invalid issuer." Super frustrating.

In Keychain select "Show Expired Certificates".

Delete expired WWDR Certificate in [login] and [system]

I deleted the old WWDR cert and downloaded the new one, but when I tried to generate a new cert for a Pass Type ID by going through the "Request a Certificate from a Certificate Authority" process the generated cert was issued and signed by the old expired WWDR cert.

What's going on? Am I misconfiguring something or is Apple still signing certs with the expired Worldwide Developer Relations Certificate?

UPDATE:

I found another WWDR cert in the System keychain that appeared to be the problem. New certs are now signed using the new one.

I'm in the same boat as you.

I'm generating new certs for Passes and the certs are signed by the expired WWDR.

Anybody understand why?

UPDATE:

<sigh> I figured it out. At least for me.

There was another expired WWDR cert hiding in my System keychain. Deleting that one allowed me to generate new certs issued and signed with the new WWDR cert when going through the "Request a Certificate from a Certificate Authority" process.

Ineed help... Have the same issue. I delete all my revoked certificates, downloaded the new WWDR Certificate and generate by a new Request a Certificate from a Certificate Authority and nothing... same problem 😐

Solved....

Delete expired WWDR Certificate in [login] and [system]

Be sure to delete boot.

Thanks! seemed to have overlooked one copy of the certificate

Hi, thanks all for the suggestions here, as suggested above I was able to fix this on my computer by simply deleting the old expired WWDR certificate and importing the new one, I did not need to generate any new distribution certificates or anything else and I've been able to build, archive and submit to TestFlight without issues.

However, one of our other developers cannot fix this on his end, I've walked him through all the steps suggested here, made sure to delete the expired WWDR certificate in both login and system in Keychain Access, and even had him delete and reimport the iOS Distribution certificate, but it still shows as having an invalid issuer.

Any other ideas? I'd like to avoid having to generate a new iOS Distro cert for the whole team if possible.

Thanks in advance!

Hey chrisnjdev,

All I can offer you is gotchas that tripped up myself and devs on my team. Maybe one will help you.

- Make sure you toggle "Show Expired Certificates" under the "View" menu when you're inside Keychain and looking for expired WWDR certs. You may think you are already seeing expired certs, but toggle this option to be sure. Trust me. I had a dev who swore he deleted the expired System WWDR... and then we found it with this method.

- Make sure you download the correct new cert. The Worldwide Developers Relations Intermediate Certificate one that expires on Feb 7, 2023. I know, duh, but it's easy to download the wrong one from that "huge wall of certs" webpage Apple offers.

- The only other piece of advice I can think of is to find one of your certs in Keychain that says "Invalid issuer", Ctr+click on it and select "Evaluate <cert name>", choose Generic and then Continue, and then click the "Show Certificate..." button. This view should show you the certificate chain and the WWDR will be in there. Select it and check it's expiration date. If it isn't Feb 7 2023, then you probably missed a old expired cert somewhere in your keychain and it's still being used.

Sorry I can't offer much but hopefully this helps someone avoid the mistakes we hit while solving this problem.

> it's easy to download the wrong one

There is a support page here, complete with a new cert (expires 2023) download link:

https://developer.apple.com/support/certificates/expiration/

Thanks Nate, we figured it out earlier, I had been trying to help him over Skype and later on in the day he realized he did not have "Show Expired Certificates" toggled on so the expired WWDR certs were not showing up. Once he enabled he found and deleted the appropriate expired certificates and all was welll again.

Needless to say we both felt a bit dumb after trying all sorts of other potential fixes, haha.

Anyhow I appreciate the help, I'm sure this will help out a few others!

I had missed the one in Login also!!! Thanks so much for this. Had already spend over an hour working on it.