@achim I don't know about Mastodon, but here are some general tips:
- Your actor is served with content-type application/json, but it should be application/ld+json; profile="https://www.w3.org/ns/activitystreams"
- It's better to embed the key in your actor document and identify it with a fragment ID. This is more widely supported than standalone keys.