An HTTPS certificate authority has been compromised. If you want to ensure #NetBSD is not vulnerable, you can run the following commands as root: # certctl untrust /usr/share/certs/mozilla/all/Comodo_AAA_Services_root.pem # certctl untrust /usr/share/certs/mozilla/all/emSign_ECC_Root_CA_-_G3.pem You can review the untrusted ones with: # certctl untrusted Read more: https://emudhra.we-have-a-problem.com/ You can test whether your system is vulnerable by loading the linked pages there. (Updates coming.)