...
2020-06-02: There are reports from other NRENs that some TLS-inspecting software/boxes boxes take exception to the expired certificates present in this chain. There is also reports of non-browser clients not working. If this affects you, update the chain to only include the GEANT CA certificate as described below.
...