Sectigo AddTrust expiration External CA Root Expiring May 30, 2020
For more info and the fix see https://support.sectigo.com/articles/Knowledge/Sectigo-AddTrust-External-CA-Root-Expiring-May-30-2020
To update the Root CA Certificate on Ubuntu use the below commands
Log in to the USS Gateway device as a root user (see Accessing the Command Line)
Run: nano /etc/ca-certificates.conf and use the arrow keys to find the line containing “AddTrust_External_Root.crt” or “AddTrustExternalRoot.crt”
Delete the whole line
Save the file by holding down Ctrl and pressing the letter O and then and exit by holding down Ctrl and pressing the letter X
Remove the old AddTrust_External_Root.crt certificate file by running the following commands. One command may fail, this is expected as it will be in one of the two locations depending on your system.
rm /usr/local/share/ca-certificates/AddTrustExternalRoot.crt
rm /usr/share/ca-certificates/mozilla/AddTrust_External_Root.crt
Run: update-ca-certificates --fresh
Run: /etc/init.d/uss-squid stop
Wait 10 seconds
Run: /etc/init.d/uss-squid start
