[Wowfunhappy]

Why don’t you consider downloading isrgrootx1.der from its official source[1] and adding it to Keychain Access to be safe?

It’s what I did on my machine running OS X 10.9. No second computer required.

1: https://letsencrypt.org/certificates/

[satellite2]

Yes that's how you solve it. But you need the updated certificate to view this website without warning, thus the need for another computer.

[Wowfunhappy]

> But you need the updated certificate to view this website without warning

I didn’t. IIRC they did some whacky thing on their own site such that it still worked in Chromium.

[cmeacham98]

Doesn't Chromium use its own CA store, or is that different on the OS X version?

[Wowfunhappy]

Chromium uses its own HTTPS implementation but does not currently use its own CA store. If it did, adding the aforementioned certificate would not have fixed all of the “Your Connection Is Not Private” errors I was encountering previously. :)

[garmaine]

They would presumably use both.

[Wowfunhappy]

Sorry, I'm not sure I understand your comment. You can presume whatever you want, but I'm telling you how it works. :)

IIRC there are plans to switch Chromium to its own certificate store on all platforms, but they seem to be a ways off.

[gregoriol]

Maybe with curl/wget?

[yjftsjthsd-h]

Both of which will also need a certificate store

[quesera]

Use the -k switch on curl to skip certificate verification.

Use a phone, or a phone call to a trusted friend, to verify the signature of the certificate.

Obviously not instructions you can give to an ordinary user, but that line was crossed at curl.