Make sure your root certificates are up to date and not expired. Additionally, it is important to have your CRL (Certificate Revocation List) up to date.