fixed it by adding the zerossl ca to the ca-bundle...
# harvester
b
fixed it by adding the zerossl ca to the ca-bundle on the new nodes =(