Replying again, the inconsistency seems to be because their cert is fine over IPv6 but IPv4 is still showing expired. That’s a very strange setup y’all have there NIST.
I see the TLS error on direct connection, with Brave (Chromium), but have only IPv4 connectivity.