Diagnostic code

ZC-E0811

a certificate is expired or not yet valid

Kind

error

Blame

external

Exit code

3

What it means

The certificate is signed by the pinned anchor but the current time is outside its validity window, allowing peer_clock_skew_ms of clock difference on each side. The signature was checked first, so the certificate is genuine. The cause shows notBefore, notAfter and this machine's time.

Check the clocks on both machines. A workload certificate lives for the service's deadline, at most x509_leaf_ttl_ms_max: ask for a new one.

Offline

The same text, without a network:

zcube explain E0811