@i @pwm Getting pleromer to recognize custom CAs was a pain, I even tried dropping them directly into castore/certifi dependencies with no result. Eventually just disabled the check altogether, which also let me federate when someone forgets to renew their cert.