Apparently #CAcert made a decision to (for some odd reason) use SHA512 (despite SHA256 being perfectly fine in the foreseeable future) which is causing issues with some software out there. So it _might_ be because of this too - at least if you've got a rather fresh CAcert certificate.