Well that's funny, the cert is valid until 2022-01-16. It might have something to do with the LE intermediate root rotation - Chrome variants and Firefox are h

Well that's funny, the cert is valid until 2022-01-16. It might have something to do with the LE intermediate root rotation - Chrome variants and Firefox are happy with the chain, but Safari's CA trust store may not have the new intermediate CA in place. I'll upgrade the system over the holidays in any case, and the new lighttpd finally has native support for CA chain inclusions. That should make all the clients happy again.