Hi Simon, zimoun 写道: > Is it a bug in Guix nss-certs side? Or on Gitlab server side? No Guix bug, the server is misconfigured. It's incorrectly sending an ISRG Root X1 certificate, which chains to the expired DST Root CA X3. It should not send ISRG Root X1 at all. Kind regards, T G-R