I came across this from time to time in versions various of Self Service
and found it to be an non-trusted root certificate in the system
keychain. If you are logged in as the user (and the user has admin
rights), you can move it to the login keychai...