I've seen lots of bad information out there on this.
Commercial sites should be using trusted authorities. If errors are seen when accessing Amazon, for example, something could be wrong.
I've seen other recommendations that turn off all invalid cert warnings. This is something that shouldn't be done if you are a consumer on commercial sites. A developer may do this, however.
Intranet sites inside of companies may issue their own certs. This is when the cert needs to be added as a trusted source.
Here are the steps to add the cert to the key chain and set it to trusted:
- Access the site
- Click the warning icon (red triangle with exclamation symbol)
- You'll see a message stating "Your connection to this site is not secure" along with some explantory text. Under this text, click the "Details" link. This will open Chrome Developer Tools.
- Click "View certificate"
- Click "Detail" section on pop-up
- Scroll down to the section that contains a URI for the domain. It should be in the "Certificate Authority Information Access" section. Click this URI and download the cert.
- Double click the cert in the downloads directory. This will open key chain access.
- Add the cert to your key chain - you can select login (user) or system (everyone).
- Once the cert is added to the key chain, double click it and set it to "Always Trust" in the Trust area.
You'll still see the warning icon in the window, but the speed bump warning you about the cert will now be gone.
The steps seem lengthy, but only take a few minutes at most.