Remove expired CA cert
Alpine 3.x contains an invalid EV cert as part of ca-certificates:
# openssl x509 -noout -text -in /etc/ssl/certs/ca-cert-Staat_der_Nederlanden_EV_Root_CA.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10000013 (0x98968d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = NL, O = Staat der Nederlanden, CN = Staat der Nederlanden EV Root CA
Validity
Not Before: Dec 8 11:19:29 2010 GMT
Not After : Dec 8 11:10:28 2022 GMT
Subject: C = NL, O = Staat der Nederlanden, CN = Staat der Nederlanden EV Root CA
Please remove this cert (or update, if available).