We had certificates from Gandi embedding expired root certicates, so I had to get rid of them. Also upgraded our gateway servers to use most recent ssl stuff and did a bunch of cleanup in the way we manage certificates.
The root cause was certificates as provided by Gandi. This isn’t yet solved on their side, but it should happen very soon.
Sorry for the inconvenience, this certificate expiration has caused a lot of problems it seems.