<!--
{
  "availability" : [
    "iOS: 2.0.0 - 4.0.0",
    "iPadOS: 2.0.0 - 4.0.0",
    "tvOS: 9.0.0 -",
    "visionOS: 1.0.0 - 1.0.0"
  ],
  "documentType" : "symbol",
  "framework" : "CFNetwork",
  "identifier" : "/documentation/CFNetwork/kCFStreamSSLAllowsExpiredRoots",
  "metadataVersion" : "0.1.0",
  "role" : "Global Variable",
  "symbol" : {
    "kind" : "Global Variable",
    "modules" : [
      "CFNetwork"
    ],
    "preciseIdentifier" : "c:@kCFStreamSSLAllowsExpiredRoots"
  },
  "title" : "kCFStreamSSLAllowsExpiredRoots"
}
-->

# kCFStreamSSLAllowsExpiredRoots

Security property whose value indicates whether expired root certificates are allowed.

```
let kCFStreamSSLAllowsExpiredRoots: CFString
```

## Discussion

By default, the value of this key is `kCFBooleanFalse` (expired root certificates are not allowed).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)