docker-compose up produces "transport: x509: certificate has expired or is not yet valid"

[jicowan]

When trying to start Notary locally on my machine with docker-compose up I get the following error:

server_1  | {"level":"error","msg":"Trust not fully operational: rpc error: code = 13 desc = connection error: desc = \"transport: x509: certificate has expired or is not yet valid\"","time":"2020-03-11T01:56:36Z"}

I'm not exactly sure what certificate it's using, but the root-ca.crt looks valid, as do all the other certificates:

$ openssl x509 -in root-ca.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16173736390655485942 (0xe074a78e1fd427f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=CA, L=San Francisco, O=Docker, CN=Notary Testing CA
        Validity
            Not Before: Mar  9 20:58:41 2020 GMT
            Not After : Mar  7 20:58:41 2030 GMT
        Subject: C=US, ST=CA, L=San Francisco, O=Docker, CN=Notary Testing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b5:3a:ae:ed:45:f1:34:59:99:e9:f1:2b:2d:36:
                    30:b2:dd:db:4f:8e:ee:03:ed:c3:14:99:4d:4f:61:
                    91:05:b5:48:f9:d8:a4:98:9b:0d:c6:6c:0c:83:af:
                    c5:98:b9:e4:53:31:fa:84:55:3e:71:37:13:de:10:
                    0c:ea:3b:e3:72:93:4e:5c:55:f0:4c:39:e8:83:e4:
                    6d:0c:7c:d6:dc:15:fe:4d:8a:ed:fd:0a:56:28:17:
                    5f:f5:1b:48:e3:76:d8:c1:5b:e5:f3:7f:1c:19:25:
                    dd:2d:5b:b4:d4:2e:bb:81:b3:f9:e6:9a:34:c5:64:
                    d3:19:25:2d:00:4e:00:91:05:44:e2:4b:ea:db:b6:
                    66:91:03:f1:8a:b9:a5:b2:13:a6:ce:3e:46:41:13:
                    88:c0:38:1d:f6:cc:ac:62:88:18:38:b5:8a:a8:b8:
                    4c:77:d1:93:67:a8:f5:65:d8:96:fd:18:c5:b2:f0:
                    8a:61:d1:98:7d:7f:35:36:f7:42:84:27:af:b7:6a:
                    54:96:57:10:70:26:d5:51:00:35:4b:f9:30:b1:f3:
                    80:27:c1:c9:d4:f2:99:bf:6a:45:61:00:74:db:0a:
                    f8:09:62:2c:3d:c7:33:d7:9b:ff:cc:3e:99:78:68:
                    81:4c:80:58:cd:ee:a1:78:ae:9e:c1:5b:ba:3a:d5:
                    d8:92:6c:f0:81:eb:b6:26:00:c4:3d:4e:23:be:f5:
                    dd:15:03:0b:73:63:68:4c:c0:1c:72:02:35:cc:ea:
                    f7:d3:eb:03:75:a4:e7:64:9a:32:50:a3:89:57:75:
                    ae:9c:e7:55:bf:aa:f6:ef:10:29:96:ce:03:e9:f9:
                    bf:f8:1d:e1:f4:e1:28:72:35:35:d2:b6:31:70:01:
                    e1:fa:9c:b6:0b:d9:f7:4b:ee:da:94:4a:0d:55:9d:
                    c1:98:7b:12:da:7c:b2:66:8d:a0:1e:02:c2:da:d5:
                    f1:d7:29:08:bc:e1:1e:4a:ef:d0:9d:48:df:a9:d3:
                    72:87:08:23:13:44:20:00:10:af:2a:12:1e:0e:7c:
                    7c:50:35:8c:7c:2b:e9:df:40:a1:0d:63:fa:dd:85:
                    f8:4f:85:58:80:f3:0b:ca:4d:4a:ea:01:0b:cc:11:
                    13:13:76:48:64:f2:ea:4e:be:e6:44:eb:ef:e0:91:
                    8d:9a:40:fc:73:8a:21:39:59:1d:df:4e:b3:50:3a:
                    b6:73:06:46:71:b9:01:0e:5a:e4:1d:58:e9:f2:d3:
                    7a:77:97:b1:91:54:88:e7:4a:06:15:10:b4:b7:c9:
                    1e:45:1b:a6:7c:ae:6a:15:cc:f4:c9:9c:08:de:30:
                    42:9f:44:29:40:7f:86:6c:cf:94:35:73:c2:68:da:
                    21:7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:1
            X509v3 Key Usage: critical
                Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier:
                87:CC:C5:5A:E9:E7:96:CE:A7:EB:9E:77:1C:67:FE:11:D7:F4:2B:D9
    Signature Algorithm: sha256WithRSAEncryption
         7a:01:8c:7e:22:64:35:c0:7a:0f:63:55:6d:98:6a:8d:b1:bc:
         9f:88:5f:0e:a3:50:15:5b:f6:3f:f7:e3:e8:0b:b3:66:d2:9d:
         16:f0:94:87:fb:10:8b:c3:a4:66:66:39:5a:55:98:9a:5a:3d:
         8f:b0:56:c9:4c:d4:e2:bd:27:09:90:72:fd:f4:af:7c:e1:19:
         c6:9c:a1:5b:5d:ef:55:cc:e1:b5:7a:e1:11:07:e1:11:54:06:
         af:83:e9:19:14:5a:ec:ec:ba:94:15:a2:36:88:c3:64:61:bf:
         a6:fe:76:4f:74:54:e2:bc:e0:34:c4:a6:dc:0b:e7:20:cc:10:
         7b:47:4b:5e:05:34:aa:b8:44:5f:23:4e:9d:86:40:c0:04:bf:
         a2:9f:77:a1:20:ee:c7:7a:71:b9:6a:97:aa:1a:da:3c:8a:29:
         b1:56:c0:48:f8:ce:18:91:c0:1b:cc:d2:7a:ab:e2:c6:81:2b:
         c4:77:8f:91:dd:50:51:58:61:e9:bb:08:7d:fe:ca:05:4a:7d:
         45:b9:31:b9:92:fb:45:47:10:3a:2e:ee:f8:ce:f6:72:e6:3e:
         10:32:a8:e5:88:88:de:c7:dc:8f:40:64:4c:b4:b9:14:a3:b6:
         26:cf:1f:8f:10:69:ff:6f:f6:d9:0d:9a:da:0b:73:6f:8a:64:
         a6:7a:99:bd:a1:95:11:83:3b:93:99:56:db:71:78:3d:a3:86:
         85:10:b1:a2:06:78:b0:dc:5a:7c:87:4c:b1:03:a4:1c:ff:24:
         c6:59:2d:66:46:fb:77:54:e0:55:5e:39:d6:bb:f2:b7:e0:44:
         19:c5:ad:77:e8:81:69:ac:d3:c6:cd:90:c9:46:11:94:fa:fb:
         5f:db:a2:f5:52:92:d1:af:1d:71:9b:ec:db:53:d4:79:79:c0:
         66:97:bc:3a:d8:8a:42:10:c7:5f:27:75:97:ad:04:e4:a8:d6:
         0a:9f:a5:89:da:76:cb:b2:fa:4e:6d:eb:2f:01:fe:e3:83:f4:
         fe:73:46:1c:0e:9e:59:82:6d:ef:0d:be:b9:02:b5:fa:19:6d:
         95:7d:85:dc:10:fb:44:9b:c9:38:37:97:14:d5:ac:6d:79:95:
         52:f9:ce:be:a5:33:4c:84:18:c9:5b:e8:de:11:43:c5:cb:a2:
         3a:9a:bc:1d:da:fb:3a:92:6b:10:e3:37:7d:6b:8a:d0:a5:34:
         52:16:77:24:e0:7e:a0:09:35:f4:75:f7:8d:06:f0:f1:85:4e:
         ff:b1:72:67:c8:27:0e:b9:2e:db:fa:69:15:76:2d:53:3b:b3:
         4a:59:30:b9:99:53:32:c3:88:b9:e3:39:74:17:a6:22:df:a4:
         c3:3f:3d:34:62:5f:8c:e2