"DigiCert High Assurance EV Root CA" (Try test link before downloading). Add to KeyChain, restart browser.