There are a ton of posts about this. I have looked at so many of them. Zero of the fixes seem to work.
(main)> PayPal:
Here is what we ended up doing on my team.
We added the 2 certs that Michael mentioned in
config/api.paypal.com.crt
Then in paypal.yml
ssl_options:
ca_file: config/api.paypal.com.crt
We left the Gem as is. Initially we tore through the gem looking for answers but ultimately we left the gem as is and added the crt and updated yaml as show above.