[CentOS] CentOS5 + lighttpd (EPEL) - fix Chrome security warning?

Apologies if I should ask this elsewhere, google search is not helping.

I've got a CentOS5 server with lighttpd installed from EPEL,
configured for https only (no connections on ports other than 443).  I
have the latest security updates for openssl, etc.  However, when
connecting to the server with recent Chrome from Windows or Android, I
get the "Your connection is not private" dialog with
"NET::ERR_CERT_VALIDITY_TOO_LONG".

Is this just a configuration issue (in which case, what do I change?)
or do I need to further upgrade one of lighttpd or openssl?

Thanks for any feedback.