Hello,
I think it is caused to hardening configuration. If you select CIS Server Level 2(for example) on installation, crypto policies are set to future:
$ update-crypto-policies --show
FUTURE
Changing it to less restrictive policies will make you use that certificates
# update-crypto-policies --set DEFAULT
Setting system policy to DEFAULT
Next you will need a reboot.
Best Regards,
Diego
PD: I change to DEFAULT The example policy that also worked, it is not needed to go back to legacy