are the openssl certificates up to date ?

[Michael Agbaglo <byteshifter_(_at_)_shifted-bytes_(_dot_)_de>]

Hi !

fetchmail complains:

bash-2.05a$ fetchmail -v --sslcertpath=~/.certs
fetchmail: 5.9.6 querying mail.powerweb.de (protocol POP3) at Mon, 02 
Sep 2002 15:23:28 +0200 (CEST): poll started
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Server CA
fetchmail: Server CommonName: *.powerweb.de
fetchmail: mail.powerweb.de key fingerprint: 
55:C4:00:25:43:C9:DE:74:D2:8D:A0:DE:12:1A:3D:4C
fetchmail: mail.powerweb.de fingerprints match.
fetchmail: Warning: server certificate verification: unable to get local 
issuer certificate
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Server CA
fetchmail: Server CommonName: *.powerweb.de
fetchmail: Warning: server certificate verification: certificate not trusted
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Server CA
fetchmail: Server CommonName: *.powerweb.de
fetchmail: Warning: server certificate verification: unable to verify 
the first certificate

My ISP claims that the Thawte certs are old. Is this true ? (I'm using 
OpenBSD 3.1)


M.