@koyax The CA cert Proxmox generates is missing a keyUsage property, which means libraries won't trust it even after adding it to my trust store :)