So I have tried to debug this a bit, but I am not making much headway. Apparently the error is: chains.sh: #718: RealCerts: Verifying certificate(s) PayPalEE.cert with flags -d AllDB -pp -o OID.2.16.840.1.114412.1.1 - FAILED chains.sh: Verifying certificate(s) BrAirWaysBadSig.cert with flags -d AllDB -pp vfychain -d AllDB -pp -vv /tmp/guix-build-nss-3.36.1.drv-0/nss-3.36.1/nss/tests/libpkix/certs/BrAirWaysBadSig.cert Chain is bad! PROBLEM WITH THE CERT CHAIN: CERT 0. BrAirWaysBadSig : ERROR -8181: Peer's Certificate has expired. Returned value is 1, expected result is fail My Guix version is —> guix (GNU Guix) 0.15.0-1.4876bc8 I have attached some files for you info. Not sure if the attachments will work or not, but here goes. Click to Download environment-variables 5 KB Click to Download output.log 40.1 MB Click to Download 2gwwhy92zviwl9k74r9vz9ccmgyw91cn-nss-3.36.1.drv 41 MB