Trust a self-signed certificate on macOS.

Keychain Access is the trust store Safari uses. Chrome on macOS follows it too.

System vs login keychain

System requires an admin password and applies to every account. Login is enough for one operator. Firefox has its own store — import there separately if you use it.

Still seeing ERR_CERT_AUTHORITY_INVALID?

Written for operators who have to trust the box they just stood up. Private keys stay in the tab. Open the generator.

Self-signed SSL for localhost HTTPS
Fix NET::ERR_CERT_AUTHORITY_INVALID
Trust a self-signed certificate on Windows
Trust a self-signed certificate on Linux