gnutls fails to consider the certificate valid:

|<2>| error: extensions present in certificate with version 1

found via:

gnutls-cli --debug 99 --x509cafile /etc/ssl/certs/ca-certificates.crt github.com