X509: certificate signed by unknown authority

In my case it was me being dumb and base64 encoding the CA cert instead of decoding…