Why many had problems, what they are exactly, what you can do about them, and how they should be prevented.
certificates
Where does macOS store a list of revoked certificates, and how does it keep them up to date? The answer isn’t perhaps what you expect.
Imagine going to open an app which you use daily, only to be told by macOS that it “will damage your computer” and must be trashed. Can we have confidence in Apple?
How to check whether a macOS Installer app still has a valid signature, and where to find its hidden Installer packages.
Checking signatures, notarization, and 64-bit code on different items like apps, command tools, and Installer packages just got much simpler.
No more fiddling with contextual menus: this new version also adds a busy spinner, and opens older packages too.
Apple’s most meaningful communication about this inexcusable failure of support were the 404 errors from its download pages.
Validating signatures isn’t straightforward. GUI apps are limited, and command tools confusing and prone to user error.
Don’t rely on being able to use any Apple installer package unless it has been downloaded recently: its certificate is about to expire.
As feared, the studentd daemon and its mysterious certificate have reappeared, and are now set to remain in Mojave in perpetuity.
The Eclectic Light Company 