Page 1 of 1

Welcome to the Tweaking4All community forums!
When participating, please keep the Forum Rules in mind!

Topics for particular software or systems: Start your topic link with the name of the application or system.
For example “MacOS X – Your question“, or “MS Word – Your Tip or Trick“.

Please note that switching to another language when reading a post will not bring you to the same post, in Dutch, as there is no translation for that post!

NZBGet: How to fix ...
Clear all

[Solved] NZBGet: How to fix TLS certificate verification failed for XYZ - certificate has expired

1 Posts
1 Users
Famed Member Admin
Joined: 11 years ago
Posts: 2703
Topic starter  

Due to a root certificate expiring (I hope I understood that right), NZBGet may throw expiration errors concerning the SSL Certificate of your usenet provider.

The quick and dirty, and not recommended option, is to set CertCeck to NO in NZBGet.
Again: not the recommended wway, as this allows for a man in the middle attack.

The correct way is to delete the certificate of "DST Root CA X3" in the file cacert.pem.

The cacert.pem file can be found here:

QNAP: /share/CACHEDEV1_DATA/.qpkg/QNZBGet/bin
macOS: /Applications/
Windows: C:\Program Files\NZBGet

Linux users: check the directory where the NZBGet binary can be found (like seen with QNAP).

Open the file cacert.pem, and the certificate section for  "DST Root CA X3"

DST Root CA X3


Alternatively, and I have not tested this, download a new cacert.pem file here: