What you need to know about the iOS 9.3.3 jailbreak certificate expiry

By , Jul 29, 2016

Pangu App Jailbreak

The Pangu jailbreak for iOS 9.2-9.3.3 finally gives you a way to modify your device to your liking again on iOS 9.3.3 with your favorite jailbreak tweaks. Unfortunately, it’s not without its faults; it relies on a certificate, which means it has an expiration date and will need to be re-signed.

In this tutorial, we’ll talk about what you have to do to renew your iOS 9.3.3 jailbreak certificate when the time comes.

iOS 9.3.3 jailbreak certificate types

There are three types of certificates that you might have on your jailbroken iOS 9.2-9.3.3 device, but you’ll only have one installed at any given time:

  1. A basic signing certificate: free and lasts 7 days
  2. A paid developer certificate: $99/year and lasts 1 year
  3. A paid enterprise developer certificate: $299/year and lasts 1 year

The basic signing certificate that lasts 7 days is the most common, and is the one you’ll come across when you jailbreak with the English version of the Pangu jailbreak tool that was released on Friday. You can get this certificate with your Apple ID (or a burner Apple ID) account that isn’t associated with the Apple Developer Program.

The paid developer certificate is one that you can purchase from Apple for $99/year by registering as a developer. Once you do, you can then sign the Pangu app for your device for 365 days without having to side-load the app every week.

The paid enterprise certificate certificate lasts 365 days (1 year), and may have been installed when you jailbroke via Safari. In some cases, you may have also received the enterprise certificate from the Windows jailbreak tool before it was revoked by Apple, but since Apple has revoked it, you can’t get this one anymore. You don’t personally have to pay the $299 for it, since 25PP took care of that for you.

To see what you have, navigate to Settings > General > Device Management. If you see an Apple ID there, that means you have the a developer certificate. If you used your free Apple ID, then you need to side-load the app on a weekly basis. If you used your paid developer Apple ID, then you should be good for a year.

On the other hand, if you see the Beijing enterprise certificate, then you shouldn’t have to side-load the jailbreak app again for at least a year, unless you break something or Apple pulls something fishy.

Now that you know there are three different kinds of certificates, and understand that they have different expiration dates and attributes, we’ll discuss how to renew them so you can keep your jailbreak going for an infinite period of time.

Knowing when to renew a certificate

If your certificate becomes expired, or stops working, then you will need to side-load the Pangu app again in order to re-sign it and make your jailbreak functional again.

You’ll know when you certificate is expired after 7 days because your Pangu or PP jailbreak app will start crashing when you try to use it to boot semi-untethered.

This will be the case whether you jailbroke with the recently-released English Pangu app for all platforms, or the Chinese Windows-only app that was hosted by 25PP.

If Cydia is crashing, and your Pangu or PP app is not, then that just means your jailbreak isn’t initialized, and you need to follow our tutorial on how to properly reboot your semi-untethered device.

How to renew a certificate

If you have the Enterprise certificate, then in theory, you shouldn’t really ever have to renew because by this time next year, there may be a jailbreak for iOS 10 already. Of course, this is only speculation, so take it with a grain of salt.

On the other hand, if you’re using the 7-day Apple ID-based certificate, then you will need to renew your certificate weekly, which means side-loading the Pangu app every seven days.

To re-new your certificate from the English Pangu jailbreak, you’ll follow these simple steps:

1) Connect your jailbroken iOS 9.3.3 device to your computer with an MFI-certified Lightning to USB cable.

2) Download the Cydia Impactor app and Pangu IPA from our Downloads page.

3) Boot your device into no jailbreak mode by simply turning it off and on again. In this state, you haven’t completed the semi-unetether yet, so it’s considered ‘no jailbreak mode.’

4) Launch the Cydia Impactor app on your computer, and you should see this interface

Cydia Impactor Interface iPhone

5) Drag the IPA file into the Cydia Impactor app:

Drag IPA file over Cydia Impactor Jailbreak iOS 9.3.3

6) Enter a valid Apple ID (it can be a burner Apple ID if you want), then click the blue OK button:

Apple ID Pangu Impactor

7) Enter the Apple ID’s password, then click on the blue OK button again:

Apple ID Password Pangu

8) Cydia Impactor will start re-signing and side-loading the IPA file onto your iOS device; just be patient.

Cydia Impactor Text at Bottom

9) Once finished, go to Settings > General > Device Management and Trust your certificate again.

Trust Pangu Certificate

10) Once trusted, launch the Pangu app and tap the Start button to enable the jailbreak once again.

Pangu English Start Jailbreak iOS 9.3.3

11) Press the lock button to put your device to sleep, and it should respring. At this point, Cydia can be re-opened and you should have access to your jailbreak tweaks and apps again.

Cydia iOS 9.3.3

Easy enough? You’re all done!

Side note for Windows jailbreak users

If you used the Chinese Pangu jailbreak tool for Windows that was hosted by 25PP, then you can still use this method to install the Pangu IPA on your jailbroken iOS 9.2-9.3.3 device instead. Just remember that you need to do this in no jailbreak mode, as it helps prevent errors and conflicts that could cause you trouble down the line.

You might want the Pangu app instead of the PP app because it’s in English instead of Chinese. Both apps physically do the same thing and allow you to boot into a semi-untethered state to use your jailbreak.

Once you’ve installed the new app, you might still see the PP app along with your Pangu app. You can delete it, but it may continue to reappear after reboots. It’s something you might just have to live with, or you can optionally restore your device and re-jailbreak it purely with the English Pangu jailbreak tool.

Wrapping up

If you have jailbroken iOS 9.2-9.3.3, then you are relying on a certificate that will expire eventually. Whether you have the 7-day developer certificate, or the 1-year enterprise certificate, we hope that this tutorial cleared up a lot of the confusion about how this jailbreak will act when your certificate expires and what you will need to do to fix it.

Also read:

If you have any additional questions about the state of the iOS 9.3.3 jailbreak, let us know in the comments below so we can do our best to continue answering questions!

  • Share:
  • Follow:
  • So um does anyone mind lending me their developer account for a few minutes? ๐Ÿ˜›

    • Rei

      Use the PPHelper PC program and try to snag a Beijing certificat and you’ll be good ๐Ÿ˜›

      • f96lrs

        ii used the pphelper program and got the beijing certific today

  • William Melendez

    This is the first jailbreak I don’t jump on board right away. I’m just going to wait to a untethered jailbreak, maybe in the near future it come out, who knows. In the meantime , I’m going to enjoy the IOS 10 beta.

    • Deluxe4arms

      Just wait for the iOS 10 jailbreak

    • Gregg

      Same here. Don’t want to jump thru hoops every week… 10 beta is awesome, even with bugs.

      • William Melendez

        Beta 3 has been fantastic for me. Looking forward for beta 4 next week, if it drops this following week !

      • Rei

        The beta on the iPod 6G is almost complete except for one bug; if you open the app switcher in landscape mode then your wallpaper will still be in portrait mode, leaving you with a misplaced wallpaper. I also ran into a bug when you reply to someone from opening a notification and suddenly entering landscape mode. That’s all from my device lol

        I use an iPod because I already own the Galaxy S7 which I’ve rooted to my liking ๐Ÿ˜›

    • MSiqueira

      Same here 2.
      Absolutely not worth the hassle for whom is already JB’ed, even with a older version.
      I use JB since the original iPhone and iOS (iPhoneOS) 1, to carrier-unlock it.
      If were only for the semi-untethered part, I would think about it.
      But with this 7-day certificate expiration, I’m totally out, until – or if – a real solution come out.
      For the time being, I’ll stay with my 9.0.2, untethered, crashy install…

    • chjode

      Agreed, especially considering that iOS 10 is due out in under two months. I’ll stick with 9.0.2 until 10.0 methinks.

    • Abhijeet Gupta

      I’m also enjoying iOS 10 beta and not reverting to 9.3.3 but we gotta keep one thing in mind “an iPhone without a jail break is like a girl without boobs.”

      • Jayy

        Like it’s still nice, but could be better. Also that’s really sexest! Lol

  • Ducky

    Those who sideload Kodi to ATV4 will find this very familiar. If you already sideload to ATV4 then I recommend doing the same method for the jailbreak, will be much easier and quicker to re-sign the app through Xcode.

  • nvog

    jb that expires…. ok.

  • TK421

    If I buy a developer certificate, is the jailbreak process the same? Thanks

    • If you have an Apple ID registered as a developer, you can side-load the app to your device yourself via Xcode, or with Cydia Impactor.

      • TK421

        Thank you. Just learning this stuff.

      • Rei

        I might consider upgrading to a Developer Apple ID, that way I could help all of my friends jailbreak their devices. I have really good friends who I trust my account with, they wouldn’t spend my money or change any passwords.

      • Haraesh Jayalingam

        I have a free developer account. I side-loaded an app around a month ago and just checked it today and still works. So does that mean if I side-load the jailbreak app it will continue working without the 7 day limit?

  • dave

    I’ve got a paid developer account. I’ll admit only had it to install betas and GM’s and whatever, so I’m a bit lost. Created what I thought was a certificate, and ran the new English installer. It says it signed it and all that, and I am jailbroken, and can reboot and rejailbreak no issues. What is odd though is there is NO certificate/provisioning profile showing at all on either of my devices. I have no idea if I am OK for 7 days, or 1 year. I don’t know if it’s SUPPOSED to not show a profile/cert, but I do know the process worked and I am and can re-jailbreak on reboots, just… no cert or profile on my device under general settings.. any ideas? Maybe someone can help my dumb ass to make sure I have the cert created right?

    • I don’t have one on my iPad either. Let’s wait and see what happens after a week.

      • dave

        so you used the English tool w/ Saurik’s impactor – it said it was signing it, and all that, installed, works, etc. and no cert/profile? If so, then at least I know it’s not just me :/ — and hoping it will work for the 1 year, since the cert I created says/said 1 year.

      • No, the device that doesn’t have the cert was jailbroken with the Windows PP app. My Pangu (English) jailbreak has my Apple ID as a profile. Both jailbreaks work though.

      • dave

        I did mine with the chinese app a few days ago. re-did it today with the english, the chinese of course cert went away, and since doing it again with the english/saurik tool its not showing a cert/profile, so who knows.. grr.

      • I guess we’ll find out what’s up in a week ๐Ÿ™‚ haha

      • Rei

        But that’s a little odd, if the jailbreak were to rely on a certificate then the app could only be ran by it. Whose to say that the jailbreak lasts forever without an existing certificate? If so, then there could be a glitch to make it last forever…we will just have to wait and see!

      • dave

        What ended up happening with the device that you didn’t have the certificate on? Is it still working, or did you end up jailbreaking it again to be safe? I ended up using the newer English ipa but was curious if yours remained working. Thanks.

  • Diego Milano

    Ok, but I still don’t see the obvious here which is:
    1) If your certificate expired and you DO NOT reboot your device, technically you should still be able to use your jailbreak (until of course you reboot).
    2) This is my biggest concern which is, if Apple grants these developer certificates, what are the chances this method will still work weeks or months from now? I’m sure Apple will find a way to patch this in which case we would be doomed.

    • 1) Some reboots occur randomly from system crashes.
      2) Maybe, but I guess we’ll have to wait and see. Definitely a con of this JB.

      • Diego Milano

        I’ve hardly ever experienced any random crashes in years, but that is not related to what was asked. Thanks anyway. ๐Ÿ™‚

      • I’m not sure how that wasn’t related to what was asked ๐Ÿ™‚ I answered both 1 and 2 of what you said :).

      • Rei

        Like GBA4IOS, Apple revoked that certificate. The app wouldn’t last a day for me unless I was jailbroken and got it forever. Whose to say that Apple couldn’t do the same with this one?

  • Great Lengths

    Wow what a joke. Glad I’m still sitting pretty back on iOS 8.3 with an Untethered Jailbreak. =)

  • Sonny

    I used a burner Apple ID for the Chinese version and have the Beijing enterprise certificate. So I guess I’m good for a year.

    • You should be. Cross your fingers.

      • af0erster31

        Where can I find the certification on my phone?

      • Rei

        Wait…I had it before too! It was a mistake to use the English one lol

  • Yyaqh

    can I use the same Faux-Apple-ID every 7 days or do I have to create a new one each time?

    • mahe

      you can use the some, the old certificate will be revoked as soon as you request a new one.

  • AndreG

    Whow! I feel like I should just stay put on 9.0.2 untethered JB until the official ios10 drops in September. Unless of course you have a Dev account already, and can get ios 10.3 Beta, cause this certficate 7 day stuff is getting crazy now.

  • Rolf Bause

    I bet Apple will change the free developer certificate to 1 or 2 days after this – mark my words!

  • TheDarxide

    I only used the Windows Chinese version when it first came out, and just checked my device management. It apparently installed the Enterprise App version.

    • makhdum

      i first saw my apple id and then suddenly i got enterprise app.. i used the windows chinese version

    • Zotto Jr Michael

      I have the same thing I wonder if it will experie in 7 days

  • osm70

    Install the Pangu app with your own ID. Run it to go to jailbroken state. When you are in a jailbroken state, run Pangu again. You get the Enterprise certificate.

    • Diego Milano

      I tried to reproduce this but it does not work and it’s not supposed to work either, as opening the Pangu app again would not allow you to do anything rather it would just tell you “jailbreak succeeded.”
      Anyone else?

      • osm70

        Well, I guess there was a different reason for why it happened.

  • It’s just not even worth it anymore.

    • Rei

      It is.

  • TornBodies

    In a Nutshell stay away from the english version if u want a Enterprise cert

    • The Enterprise cert is gone. Apple revoked it. The only people who still have it are those who used the tool early on.

      • TornBodies

        oh sucks for them i jumped first chance on the jailbreak

  • xoFoxtail

    So assuming I did actually want to do this jailbreak and not use my Developer account, I’d have to go through this process every seven days? Doesn’t seem worth it to me.

    • TornBodies

      if u have the Chinese version u shouldn’t have to i guess we will all find out sunday

      • Not entirely true.

      • TornBodies

        Sunday My app stopped working i re-jailbroke with pangu 1.2 the 1.2 tool still has a new enterprise cert

  • waqass

    If i purchase a developer account how many devices can b signed with a single account ?

  • Mark S

    I feel bad for the people who have to go through this nonsense every week to keep a jb. I’ll stay 902.

  • Hassan Sanie San Shaheed

    Anyone else have a problem getting Locations to function after the jailbreak?

  • Sean McHugh

    So i originaly jailbroke using the safari method an now im stuck in un jailbroke mode cause of the cert being revoked if i reinstall the pangu/pp app using the windows version will i have to do it every week or no?

    • Rei

      You will have to. I was shameful enough to remove my Beijing Enterprise Certificate for the English program and now my jailbreak is limited to a week ๐Ÿ™

  • M_Hawke

    Are you kidding me?!!! This is nonsense. Not going to jb.

  • Ken Love

    So if I JailBroke with the Safari method and i have the enterprise certificate and I use Impactor to load the English version, will I loose my enterprise certificate? I am thinking that it might be better to just keep what I have and not mess with it. The JailBreak is working amazingly well!!!

  • Mallouk Malek

    but technically if I don’t reboot my device, i wont need to run PP and there for no need to worry about certificate expiry ?

    • Rei

      Correct. But if you install a tweak that requires you to reboot then you’re screwed unless you close out Cydia in the app switcher then remove the tweak *UNLESS it still requires you to reboot upon deleting the tweak (e.g. Winterboard), even system crashes could put you in the non jailbroken state. If your device dies from battery drain it’ll unjailbreak too, I doubt that you can keep your device on all year. The battery would dissipate.

  • Denial

    So, I jailbroke with the Windows updated app from pp 2 days ago, after I saw that post were you said Apple was revoquing the certificates used in the Safari JB. The app never asked for my Apple ID (specifically created for the occasion smh) and I only had to type a capcha.
    Now my question is, what does the picture below mean?
    I understood that, seeing that I have the Beijing enterprise certificate, I should be good for a year (yay) but this bogs me ^^

    • Rolf Bause

      Yeah, I basically updated with the Chinese tool around the exact same time as you did. I was a little surprised too tbh.
      I think they simply changed the process how to get that pp app on your device (probably for privacy reasons). At first you signed it with your own apple id (like it is still in impactor) and after that they probably just used a randomly generated one.
      I think, as long as you have that cert, you should be golden =)

  • Y2J

    So if you use a burner Apple ID is kind of just luck of the draw as far as which certificate you get?

  • SwimBoy 12

    It says
    You cannot run your app on a device

    • Rei

      Oh, wow. I’ve never ran into that error so I can’t help you. A restore may be able to help though..?

      • SwimBoy 12

        I did restore it to get rid of the other jailbreak

      • SwimBoy 12

        Can some one help me please

  • Rei

    Cydia was creashing on me, I just flipped Airplane mode on and off a bunch of times and Cydia worked again..?

  • Nuno Miguel Ribeiro

    What is the Beijing enterprise certificate? Is it pangu? Thats what i have. It says pangu-verified. Does this Mean 1 year? Thank you.

    • Zotto Jr Michael

      I have same thing

  • Diego

    Ok, after that, if I reboot my device, what proccess should I do?

  • Andy Luo

    Can you use the same Apple ID to re-sign the Pangu Jailbreak app every 7 days? Will it still work if you just re-sign it using the same Apple ID? Thanks a lot.

  • Klark Luis Fajardo Peralta

    may i ask. i jailbreak using the english version of pangu with a free account so it means its gonna expired in 7 days. my question is. can i jailbreak it again with the chinese version of pangu so it will last for a year.

  • nvog

    semi-tethered jb that needs a certificate which eventually expires, my ….

    Piece of advice to worldwide 9.0.2 (and previous) jb-ers…. KEEP YOUR UNTETHERED UNTIL NEXT UNTETHERED COMES UP.

  • Blood

    Someone got the Apple ID and pass of a phone I just tried to do after I tried it!

  • amjath sakeef

    Cannot verify both apps pp and pangu on my phone.. And phone has been jailbroken .after rebootIt won’t verify pp app.. And pangu .. I’ did reinstall and restore my phone 6 time still not working. Help me to fix this ..sry for my eng..

  • Patrick Absi

    after one year just set the time back to any date while it has worked, run the pp app to activate the jb again. after it is activated just set time back

  • Aladeen

    So based on your experience does the Chinese PP Jailbreak last more than a week or should I just use the English one and resign every week?

  • Patrick Absi

    the first point is that the english version is valid for 7 days after that you have to set the date back to the time where the certificate worked every time when you restart the phone to use the jailbreak app, or you resign it! resigning is only needed, if it is too much work for you to set the date back after every restart to just use the jailbreak app one time to apply the jb ๐Ÿ˜‰

  • Patrick Absi

    the chinese version lasts for one year with an enterprise certificate (i don’t know if it still works)! if i where you i would stay where i am, never mind if 7 days or one week certificate because ios 9.3.4 is just out, and if then somthing goes wrong, you have to pray that the signing window for ios 9.3.3 is still open…

  • Turker Donmez

    I keep getting this error when trying to reinstall the jailbreak after the 7 days

  • Benny

    ***************************9.3.3 JB issues: PLEASE READ***************************

    iPhone 6S 128GB, installed the Pangu JB with impactor etc.. works great most of the time, and also have the 1 year Cert.

    #1 sometimes I have random grayed out icons, fix by tapping on it and opening app.
    #2 randomly all of my apps will lose their login access (Facebook, letgo, messenger etc..) the only way to fix is to reboot and re JB with Pangu app on iPhone. Then all works fine again.

    Why is this happening with my permissions? Worth noting that when this random access issue happens, my notes crash, and my reminders are all gone. IS this a bug that Pangu is aware of? Its getting pretty annoying!