port cannot fetch because of expired cert, but cert is OK according to Safari, curl (question related to Mojave / Catalina)

[Dave Horsfall]

On Sun, 7 Nov 2021, Bill Cole wrote:

> I have my own Mojave machines working without a problem after removing 
> the bad certificate from /etc/ssl/cert.pem. The one that starts like 
> this:

[...]

Intrigued, I checked my own:

     mackie:~ dave$ grep "Not After" /etc/ssl/cert.pem


             Not After : Aug 13 23:59:00 2018 GMT
             Not After : Aug 22 16:41:51 2018 GMT
                 Not After: Aug 22 16:41:51 2018 GMT
             Not After : Aug  1 23:59:59 2028 GMT
             Not After : Jan 28 12:00:00 2028 GMT
             Not After : Dec 15 08:00:00 2021 GMT
             Not After : Mar 18 10:00:00 2029 GMT
             Not After : Dec 31 23:59:59 2020 GMT
             Not After : Dec 31 23:59:59 2020 GMT
             Not After : Jul 16 23:59:59 2036 GMT
             Not After : Jul 16 23:59:59 2036 GMT
             Not After : Jan 18 23:59:59 2038 GMT
             Not After : Dec  1 23:59:59 2037 GMT
             Not After : Jul 16 23:59:59 2036 GMT
             Not After : Sep 17 19:46:36 2036 GMT
             Not After : Jun 26 00:19:54 2019 GMT
             Not After : May 25 16:39:40 2019 GMT
                 Not Before: May 25 16:09:40 1999 GMT, Not After: May 25 16:09:40 2019 GMT
             Not After : Nov 10 00:00:00 2031 GMT
             Not After : Nov 10 00:00:00 2031 GMT
             Not After : Nov 10 00:00:00 2031 GMT
             Not After : Jun 21 04:00:00 2020 GMT
             Not After : Jun 21 04:00:00 2020 GMT
             Not After : May 21 04:00:00 2022 GMT
             Not After : Mar  4 05:00:00 2019 GMT
             Not After : Jul 16 23:59:59 2036 GMT
             Not After : Dec  1 23:59:59 2037 GMT
             Not After : Mar  4 05:00:00 2029 GMT
             Not After : Mar  4 05:00:00 2029 GMT
             Not After : Jun 29 17:06:20 2034 GMT
             Not After : Dec 31 23:59:59 2037 GMT
             Not After : Jun 29 17:39:16 2034 GMT
             Not After : Dec 31 23:59:59 2037 GMT
             Not After : Dec 31 23:59:59 2037 GMT
             Not After : Dec 31 23:59:01 2039 GMT
             Not After : Jul 16 23:59:59 2036 GMT
             Not After : Jan 18 23:59:59 2038 GMT
             Not After : Dec  1 23:59:59 2037 GMT
             Not After : May 30 10:48:38 2020 GMT
             Not After : Dec 31 23:59:59 2028 GMT
             Not After : Jul  9 18:19:22 2019 GMT
             Not After : May 12 23:59:00 2025 GMT
             Not After : Jul  9 23:59:00 2019 GMT
             Not After : Oct  1 23:59:59 2033 GMT
             Not After : Oct  1 23:59:59 2033 GMT
             Not After : Oct 25 08:30:35 2036 GMT
             Not After : Oct 25 08:36:00 2036 GMT
             Not After : Oct 25 08:32:46 2036 GMT
             Not After : Sep 30 14:01:15 2021 GMT
             Not After : Dec  6 15:08:21 2028 GMT

So I wonder how widespread this problem is?  And I'm not happy with those 
that are set way in the future; I heard somewhere that 5 years is the 
recommended max.

-- Dave