Hi folks, apparently /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt expired last year: % openssl x509 -in /usr/share/ca-certificates/mozilla/DST_Root_CA_X3.crt -noout -dates notBefore=Sep 30 21:12:19 2000 GMT notAfter=Sep 30 14:01:15 2021 GMT I wonder why it is still included in ca-certificates for Bullseye? Regards Harri