IOS13 Beta / iOS13 requirements TLS Certificate

Recent versions of Safari do not appear to display the lock icon or certificate unless all content loaded by the page is https. For example, if the page URL is https but it loads a JavaScript file via http, no lock icon.

The only workaround I've found so far is to run the openssl command in Terminal, like this:

echo ^d | openssl s_client -connect host.example.com:443

This will show you the certificate chain back to whatever root authority is used to sign, if any. "verify error" will show things like "self signed certificate".

servermgrd looks up the certificate it uses for port 311 via an identity preference named "com.apple.servermgrd". By default, the preference points to the self-signed "com.apple.servermgrd" identity cert. After you change the preference you can remove the old self-signed cert without causing any harm. But you must make sure that the access control list (ACL) on the private key of the certificate that you want servermgrd to use allows servermgrd access.

If servermgrd cannot access the private key, it will delete the preference and create a new self-signed identity and set a new preference to point to the newly created identity cert.