So I have tried to debug this a bit, but I am not making much headway.

Apparently the error is:

chains.sh: #718: RealCerts: Verifying certificate(s)  PayPalEE.cert with flags -d AllDB -pp      -o OID.2.16.840.1.114412.1.1  - FAILED
chains.sh: Verifying certificate(s)  BrAirWaysBadSig.cert with flags -d AllDB -pp      
vfychain -d AllDB -pp -vv       /tmp/guix-build-nss-3.36.1.drv-0/nss-3.36.1/nss/tests/libpkix/certs/BrAirWaysBadSig.cert 
Chain is bad!
PROBLEM WITH THE CERT CHAIN:
CERT 0. BrAirWaysBadSig :
  ERROR -8181: Peer's Certificate has expired.
Returned value is 1, expected result is fail


My Guix version is —> guix (GNU Guix) 0.15.0-1.4876bc8

I have attached some files for you info.  Not sure if the attachments will work or not, but here goes.

Click to Download
environment-variables
5 KB
Click to Download
output.log
40.1 MB
Click to Download
2gwwhy92zviwl9k74r9vz9ccmgyw91cn-nss-3.36.1.drv
41 MB