R3 certificate expired — macOS

[Nummer378]

@rg305

[this part is junky looking]

depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = *.y3ti.studio
verify return:1

This shows OpenSSL's verify path, i.e. how it walked the chain. Which uses ISRG Root X1 as the trust anchor, which is both good and intended.

@rg305

---
Certificate chain
 0 s:CN = *.y3ti.studio
   i:C = US, O = Let's Encrypt, CN = R3
   [shown cert]
 1 s:CN = *.y3ti.studio
   i:C = US, O = Let's Encrypt, CN = R3
   [shown cert]
 2 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   [shown cert]
 3 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
   [shown cert]
---

This is just displaying what it got from the server (which is what you're looking for in this case)