Well, #Apple has put me in a bit of a pickle.
I work for an org with a private #CA that issues 50-year #TLS certificates. One such certificate protects #Git repos on a #Forgejo instance.
#GitLFS on #macOS says the cert is “not standards compliant”!
The CA/B standards on certificate lifetime aren't supposed to apply to private CAs (that's the org's business, not the CA/B Forum's), but for reasons I cannot fathom, Apple enforces them on private CAs too…and therefore so does Git-LFS! 🤦♂️