I had to do a fresh install on a 2015 iMac. Same problems with the SSL certificates. I found it rather shocking that a 10 year old computer cannot be booted anymore, and as far as I understand it it's mostly because apple chooses to serve certificates with poor backwards compatibility on a domain that is used for updates, which is just lazy.