https://blog.imcaoxuan.cn/en/tags/pkcs12/Recent content in PKCS12 on CX's BlogHugoen-USimcaoxuan.cnMon, 26 Oct 2026 00:00:00 +0000https://blog.imcaoxuan.cn/en/posts/2026-10-26-mtls-client-cert-macos-ios/Mon, 26 Oct 2026 00:00:00 +0000https://blog.imcaoxuan.cn/en/posts/2026-10-26-mtls-client-cert-macos-ios/<h1 id="accessing-mtls-websites-with-client-certificates-on-macos-and-ios">Accessing mTLS Websites with Client Certificates on macOS and iOS</h1> <p>This article explains how to configure client certificates on macOS and iOS devices to access HTTPS websites that enable mutual TLS (mTLS). The examples use a private CA, <code>step-ca</code>, Nginx, PKCS#12, and a PIV smart card. All domain names, certificate names, filenames, and IP addresses in this article are examples; replace them with your actual values.</p> <h2 id="1-mtls-authentication-process">1. mTLS Authentication Process</h2> <p>With ordinary HTTPS, the client primarily validates the server certificate; mTLS additionally requires the server to validate the client certificate.</p>