the invention provides an improved method and system for security information acquisition . a relatively small amount of nonvolatile storage at the client consumer electronic device is used to obtain a chain of trusted root certificates , thus providing each client consumer electronic device with a trustable technique for access to secure communication . the trusted root certificates are provided by one or more tsips , and are chained together so that a current root certificate can be obtained by the client consumer electronic device , even using an expired root certificate . the client consumer electronic device uses a current root certificate to obtain a sio from the tsip . the sio includes information regarding at least one trusted entity , such as a one or more trusted entity certificates , and other trust information . the sio is digitally signed by the tsip and can be verified by the client consumer electronic device using the current root certificate .