Please show us your configuration file. And please show the attributes of your certificates. We don’t need all of them, output of openssl x509 -in <certificate file> -noout -subject -issuer -ext extendedKeyUsage,keyUsage,basicConstraints is sufficient.