This is due to the [Let's Encrypt Root Cert expiration][1]. SQLite's cert is fine. The problem is that your client has not updated its set of root certs lately. I had the same problem with "curl" on my Ubuntu 16.04 desktop this morning. Everything else on my desktop continued to work fine, but for whatever reason, "curl" was clinging to an older set of root certificates. I solved that problem by copying the /etc/ssl/certs directory (and all of its content) from a newer Ubuntu 20.04 machine over into my desktop. [1]: https://techcrunch.com/2021/09/21/lets-encrypt-root-expiry/