# Is Apple blocking LE-Certificates?

**URL:** <https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640>\
**Category:** Issuance Policy\
**Created:** [July 7, 2017, 12:09pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640 "2017-07-07T12:09:13Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![janvl](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@janvl](https://community.letsencrypt.org/u/janvl)\
**Post date:** [July 7, 2017, 12:09pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/1 "2017-07-07T12:09:13Z")

</div>

Hi,

I just read an article stating that Apple with IOS (mail and browser) blocks websites with LE-Certificates.  
I do not use Apple, ist this true?

Kind regards,  
Jan

---

<div class="post-metadata">

**Author:** ![cpu](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/cpu/32/84514_2.png) [@cpu](https://community.letsencrypt.org/u/cpu)\
**Post date:** [July 7, 2017, 1:52pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/2 "2017-07-07T13:52:12Z")

</div>

> [@janvl](#):
>
> I just read an article stating that Apple with IOS (mail and browser) blocks websites with LE-Certificates.  
> I do not use Apple, ist this true?

Hi @janvl,

I don't believe this is true. We [maintain a certificate compatibility list](https://letsencrypt.org/docs/certificate-compatibility/) with known compatible/incompatible software. Safari is known to be compatible.

Thanks!

---

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [July 7, 2017, 3:46pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/3 "2017-07-07T15:46:08Z")

</div>

My i-devices (iphones and ipads) connect just fine to my web and mail servers, which are using LE certificates.

---

<div class="post-metadata">

**Author:** ![tdelmas](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/tdelmas/32/1866_2.png) [@tdelmas](https://community.letsencrypt.org/u/tdelmas)\
**Post date:** [July 7, 2017, 6:08pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/4 "2017-07-07T18:08:34Z")

</div>

> [@janvl](#):
>
> I just read an article

Could you link that article ?

Itunes had problems but it's now solved: [iTunes rejecting LE certs? - #54 by jsha](https://community.letsencrypt.org/t/itunes-rejecting-le-certs/11486/54)

---

<div class="post-metadata">

**Author:** ![janvl](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@janvl](https://community.letsencrypt.org/u/janvl)\
**Post date:** [July 7, 2017, 7:34pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/5 "2017-07-07T19:34:50Z")

</div>

As a reaction on the news that Letsencrypt plans to offer wildcart certificates on a german forum the following was stated:

[https://www.heise.de/forum/heise-Security/News-Kommentare/HTTPS-Let-s-Encrypt-stellt-Wildcard-Zertifikate-in-Aussicht/Re-Gruende-fuer-den-Kauf-eines-Zertifikats/posting-30662491/show/](https://www.heise.de/forum/heise-Security/News-Kommentare/HTTPS-Let-s-Encrypt-stellt-Wildcard-Zertifikate-in-Aussicht/Re-Gruende-fuer-den-Kauf-eines-Zertifikats/posting-30662491/show/)

After that there is a discussion on apple blocking websites/webservices with LE-certs.

After what I heard here this is most likely not the case.

Regards,  
Jan

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [July 7, 2017, 7:52pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/6 "2017-07-07T19:52:24Z")

</div>

Someone in that thread mentioned

[https://discussions.apple.com/thread/7785431?start=0&tstart=0](https://discussions.apple.com/thread/7785431?start=0&tstart=0)

However, there was nothing definitive presented there. I think it’s likely that the problem was a misconfiguration on the web site rather than a policy decision by Apple, but it’s probably too late to confirm this easily by now.

---

<div class="post-metadata">

**Author:** ![janvl](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@janvl](https://community.letsencrypt.org/u/janvl)\
**Post date:** [July 7, 2017, 9:28pm UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/7 "2017-07-07T21:28:30Z")

</div>

Right, that is why asked here.

It did seem unlikely that apple would risk their market share by marking LE as insecure.

But one never knows what apple decides.

I stick to Linux on my self-build PC with Firefox.

Kind regards,  
Jan

---

<div class="post-metadata">

**Author:** ![ebonsi](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ebonsi/32/14423_2.png) [@ebonsi](https://community.letsencrypt.org/u/ebonsi)\
**Post date:** [July 8, 2017, 12:56am UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/8 "2017-07-08T00:56:21Z")

</div>

@janvl  
I have no idea where you read this but that is false! Apple have been doing some strange things with their OS but this is not one of them. I am on a OS X Client Server configured to host 3 domains with LE and everything works just fine. I have been testing with the major browsers from the beginning and did not found any compatibilities issues either.

---

<div class="post-metadata">

**Author:** ![janvl](https://avatars.discourse-cdn.com/v4/letter/j/a87d85/32.png) [@janvl](https://community.letsencrypt.org/u/janvl)\
**Post date:** [July 8, 2017, 7:42am UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/9 "2017-07-08T07:42:43Z")

</div>

Thank you ebonsi,

the link where I read this, is above.  
As I host over a hundred domains/subdomains with a lot of LE certificates it is important to know that apple is not blocking this. This Forum is the place to ask such a question I guess, seeing the answers I am confident that there is no problem like this german stated.

Kind regards,  
Jan

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 7, 2017, 7:42am UTC](https://community.letsencrypt.org/t/is-apple-blocking-le-certificates/37640/10 "2017-08-07T07:42:49Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
