Forum OpenACS Q&A: Re: getting nsssl and nssock errors when starting service
if you want to know what's going on, use a command like the following (replace https://openacs.org with your site)
curl -v https://openacs.org 2>&1|lessProbably, curl allows the self-signed certificate.
The better approach is to get a real certificate, since newer browser are getting increasingly unhappy with insufficient secured certificates. We use on openacs.org a Let's Encrypt certificate, installed via the letsencrypt module of NaviServer.