Symantec Class 3 Secure Server CA - G4

Question

Even though I include this in the configuration profile, it still shows as not verified and the user always has to click Accept. I need to avoid that step using the configuration profiles for iPads.  The cert 'Symantec Class 3 Secure Server CA - G4' is not currently listed in the IOS list of trusted certs but that shouldn't matter because I'm installing it manually via configuration profile. So what else am I missing? The cert is installed but they still have to click accept when connecting to the SSID.
iOS 8: List of available trusted root certificates - Apple Support

Answer 1

Certificate:
  Data:
  Version: 3 (0x2)
  Serial Number:
  1f:35:ef:32:7c:44:07:34:8d:bd:9a:9e:e7:e2:1f:e7
  Signature Algorithm: sha256WithRSAEncryption
  Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4
  Validity
  Not Before: Jul 1 00:00:00 2014 GMT
  Not After : Jul 2 23:59:59 2015 GMT
  Subject: <redacted>
  Subject Public Key Info:
  Public Key Algorithm: rsaEncryption
  Public-Key: (2048 bit)
  Exponent: 65537 (0x10001)
  X509v3 extensions:
  X509v3 Subject Alternative Name:
  DNS:<redacted>
  X509v3 Basic Constraints:
  CA:FALSE
  X509v3 Key Usage: critical
  Digital Signature, Key Encipherment
  X509v3 Extended Key Usage:
  TLS Web Server Authentication, TLS Web Client Authentication
  X509v3 Certificate Policies:
  Policy: 2.16.840.1.113733.1.7.54
  CPS: https://d.symcb.com/cps
  User Notice:
  Explicit Text: https://d.symcb.com/rpa
  X509v3 Authority Key Identifier:
  keyid:5F:60:CF:61:90:55:DF:84:43:14:8A:60:2A:B2:F5:7A:F4:43:18:EF
  X509v3 CRL Distribution Points:
  Full Name:
  URI:http://ss.symcb.com/ss.crl
  Authority Information Access:
  OCSP - URI:http://ss.symcd.com
  CA Issuers - URI:http://ss.symcb.com/ss.crt
  Signature Algorithm: sha256WithRSAEncryption