I had this same issue, but it was because my server's CMOS battery was dead and I had to manually adjust the system time to be accurate for the certificates to be valid. In case anyone else has this problem, and --refresh doesn't help:
Check the time:
$ date Then adjust the time as necessary:
$ date --set="2 OCT 2006 18:00:00"