CA certificate used like a server certificate

What's going on

This certificate is marked CA=true — it's meant to SIGN other certificates, not to secure a website or service itself. Using it as a server certificate confuses clients and, if its key is exposed on a server, undermines everything it ever signed.

How to fix it

Issue a proper leaf certificate from this CA (or from a public CA) for the actual service, and keep the CA certificate and key locked away — ideally offline.

New to certificates? Start with the guide: How to read an SSL certificate.