I also just encountered this bug. The web server gets an A rating from ssllabs, The cert on the webserver does have an intermediate certificate.
This was with lftp 4.6.3a-1+b1 libgnutls-deb0-28 3.3.18-1 I rebuilt the lftp package locally using OpenSSL, and did not get the error. Diane
