CloudKit certificate error on macOS Mojave

Hello,


I develop a macOS application (App Store distribution) that uses CloudKit to synchronize records between iOS and macOS devices. One of my customers receives the following error message on macOS Mojave 10.14.0 when trying to fetch records from CloudKit:


"The certificate for this server is invalid. You might be connecting to a server that is pretending to be “gateway-carry.icloud.com” which could put your confidential information at risk."


He sent me a screenshot of his Apple certificates, which look fine to me:


https://pasteboard.co/IeXlFv8.png


What could be the cause of this issue? What else can the customer check to narrow down the problem?


Thanks for your help!


Update: The customer has also verified that his date & time settings are correct. He doesn't use any firewall or network filtering software.