I thought my solution may help others when encountering 'certificate verify failed' errors in the logs.
I am running a RHEL 9 server and have duo_unix-2.0.3-0.el9.x86_64 installed via the official repo. I was struggling to get the Duo prompt to work ...