Certificate data is old

[dolmen]

From certifi.go:

// CACerts builds an X.509 certificate pool containing the
// certificate bundle from https://mkcert.org/generate/ fetch on 2021-05-07 14:14:36.874796853 -0700 PDT m=+0.476299993.

This is already 1.5 years old.

[mattrobenolt]

Hey @dolmen you're, right, I split off a branch and put in some work trying to just automate updating and tagging periodically, that I kinda dropped the ball on finishing.

See: https://github.com/certifi/gocertifi/tree/test-update

I just gotta pull the trigger on auto tagging and finish up some loose ends, then releases will be fully automated and update whenever the root certs change.

I'll try and get that over the next few days.

[dolmen]

The main branch is still out of date. And the test-update branch has still some issues (#29).

[dolmen]

I recommend to switch to module github.com/breml/rootcerts.