<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									NZBGet: How to fix TLS certificate verification failed for XYZ - certificate has expired - Miscellaneous Software				            </title>
            <link>https://www.tweaking4all.com/forum/miscellaneous-software/nzbget-how-to-fix-tls-certificate-verification-failed-for-xyz-certificate-has-expired/</link>
            <description>Tweaking4All.com Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Sat, 09 May 2026 19:15:19 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>NZBGet: How to fix TLS certificate verification failed for XYZ - certificate has expired</title>
                        <link>https://www.tweaking4all.com/forum/miscellaneous-software/nzbget-how-to-fix-tls-certificate-verification-failed-for-xyz-certificate-has-expired/#post-3766</link>
                        <pubDate>Wed, 06 Oct 2021 12:11:59 +0000</pubDate>
                        <description><![CDATA[Due to a root certificate expiring (I hope I understood that right), NZBGet may throw expiration errors concerning the SSL Certificate of your usenet provider.
The quick and dirty, and not ...]]></description>
                        <content:encoded><![CDATA[<p>Due to a root certificate expiring (I hope I understood that right), NZBGet may throw expiration errors concerning the SSL Certificate of your usenet provider.</p>
<p>The quick and dirty, and <strong>not recommended</strong> option, is to set <strong>CertCeck</strong> to <strong>NO</strong> in NZBGet.<br />Again: not the recommended wway, as this allows for a man in the middle attack.</p>
<p>The correct way is to <strong>delete the certificate</strong> of "<strong>DST Root CA X3</strong>" in the file <strong>cacert.pem</strong>.</p>
<p>The cacert.pem file can be found here:</p>
<p><strong>QNAP</strong>: /share/CACHEDEV1_DATA/.qpkg/QNZBGet/bin<br /><strong>macOS</strong>: /Applications/NZBGet.app/Contents/Resources/tools<br /><strong>Windows</strong>: <span>C:\Program Files\NZBGet</span></p>
<p>Linux users: check the directory where the NZBGet binary can be found (like seen with QNAP).</p>
<p>Open the file cacert.pem, and the certificate section for  "<strong>DST Root CA X3</strong>"</p>
<pre contenteditable="false">DST Root CA X3
=========
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----</pre>
<p> </p>
<p>Alternatively, and I have not tested this, download a new cacert.pem file here: <a href="https://nzbget.net/info/cacert.pem" target="_blank" rel="noopener">https://nzbget.net/info/cacert.pem</a></p>]]></content:encoded>
						                            <category domain="https://www.tweaking4all.com/forum/miscellaneous-software/">Miscellaneous Software</category>                        <dc:creator>Hans</dc:creator>
                        <guid isPermaLink="true">https://www.tweaking4all.com/forum/miscellaneous-software/nzbget-how-to-fix-tls-certificate-verification-failed-for-xyz-certificate-has-expired/#post-3766</guid>
                    </item>
							        </channel>
        </rss>
		