The certificate has expired. 2. The certificate does not have the right EKU. The certificate should have the server authentication ...