@azonenberg that sounds like you need to put the intermediate in the trust store, and not the root?