[niffydroid]

Thankfully our uptime services spotted this earlier in the week. I'm terrible with certs, so no idea why a cert we brought this year is even using this root ca. To be honest, things like let's encrypt or cloud services which manage ssl is a great help

[abiogenesis]

It uses two root CAs, one old and one new. Your web server must be serving the intermediate certificate signed by the older CA.