severity: critical Thanks You will need to workaround this. As such this motivates critical me think.
just doing a straight up curl will hang until timeout. With the expired cert disabled this is bypassaed (without curl -k). 1. Edit /etc/ca-certificates.conf and put a bang/exclamation mark (!) before mozilla/AddTrust_External_Root.crt 2. Run update-ca-certificates