Error [SSL: CERTIFICATE_VERIFY_FAILED] : certificate has expired (_ssl.c:997)

As for the specific error, it looks like the client is providing or utilizing an expired certificate, resulting in the connection failure. The server certificate (.pem) is available for download directly here. This can be used directly as a server CA file.

Please reach out to your HiveMQ Cloud support team if you need any further assistance.