I would suggest increasing the TTL to a day if you are not planning on moving servers in the near future.
Sep 26 2022
Sep 1 2022
@avivey the one in upstream does not contain the new ISRG Root X2 CA.
I submitted D25049 for review on the 26th to address certs signed by the ISRG Root X2 root that is in the updated default.pem file.
Aug 26 2022
Note the ISRG Root X2 has been added here used by Lets Encrypt.
Aug 21 2022
Using a repository cluster for syncing repositories to two hosts I can push fine via ssh: