If you get this error after generating self-signed certs, the issue is that they are signed in UTC but the validity is checked in localtime. Setting the clock on my router to UTC fixed this issue; you’ll see other people waited until the GMT offset had passed (“it just started working”).
Hopefully this note saves other people some trouble.
