If you are having trouble downloading files or going to some sites and
having to ignore certificate warnings and so forth on an older iOS
device, maybe these notes will help.

!!! YOU DO THE FOLLOWING AT YOUR OWN RISK !!!

Last updated 2025/05/03

------------------------------------------------------------------------

LET'S ENCRYPT PEM (Easiest) METHOD; NO JAILBREAK REQUIRED

Open Safari and go to https://letsencrypt.org/certs/isrgrootx1.pem

Plain HTTP altternative link: https://blog.jjhayes.net/isrgrootx1.pem

Once you’ve got the isrgrootx1.pem file downloaded open it and "install"
the new certificate.

    Settings -> Downloaded Profile -> ISRG Root X1 -> Install
    
You should then at least be able to go to archive.org and grab some IPA
files now. Installing this PEM may also fix some other things. Things
like this are why old-school computer users hate "https" so much.

HOWEVER, remember that certificates expire. You may at some point have
to uninstall the "isrgrootx1.pem" and re-install it again, though it 
should last at least a few years (hopefully).

------------------------------------------------------------------------

WGET METHOD; JAILBREAK REQUIRED

If you are using Safari on a 32-bit, jailbroken iOS device and downloads
fail, usually because of some certificate-related, https nonsense,
install a terminal emulator and 'wget' using Cydia and try running...

    wget --no-check-certificate -c [URL]
    
The "--no-check-certificate" part makes 'wget' avoid checking
certificates. The "-c" part tells wget to try again if the download
fails; you can also "CTRL+c" a 'wget -c' download and "continue" it
later. The "[URL]" part is where the download URL goes; make sure to
place this in single-quotes if it contains any characters that BASH
may get confused with.

------------------------------------------------------------------------

CURL METHOD; JAILBREAK REQUIRED

If you are using Safari on a 32-bit, jailbroken iOS device and downloads
fail, usually because of some certificate-related, https nonsense,
install a terminal emulator and 'cURL' using Cydia and try running...

    curl -k [URL]
    
    OR
    
    curl --insecure [URL]

------------------------------------------------------------------------