This message was deleted.

exact error i received is

kubectl logs -n kubewarden -l kubewarden/policy-server=default
2026-04-06T20:23:33.172201Z  INFO sigstore::cosign::client_builder: Cannot parse Rekor public key with id cf1199155bddd051268d1f16ac5c0c75c009f6fb5a63f4177f8e18d7051e3fa0: Pkcs8 spki error : Ecdsa-P256 from der bytes to public key failed: unknown/unsupported algorithm OID: 1.2.840.10045.2.1
2026-04-06T20:23:33.172316Z  INFO policy_server::policy_downloader: policies download download_dir="/tmp" policies_count=1 status="init"
2026-04-06T20:23:33.237232Z ERROR rustls_platform_verifier::verification::others: failed to verify TLS certificate: invalid peer certificate: UnknownIssuer
2026-04-06T20:23:33.239637Z ERROR rustls_platform_verifier::verification::others: failed to verify TLS certificate: invalid peer certificate: UnknownIssuer
2026-04-06T20:23:33.269456Z ERROR rustls_platform_verifier::verification::others: failed to verify TLS certificate: invalid peer certificate: UnknownIssuer
2026-04-06T20:23:33.271895Z ERROR rustls_platform_verifier::verification::others: failed to verify TLS certificate: invalid peer certificate: UnknownIssuer
2026-04-06T20:23:33.271976Z ERROR policy_server::policy_downloader: policy download failed policy="clusterwide-privileged-pods" error=SourceError(OCIRegistryError(RequestError(reqwest::Error { kind: Request, url: "<http://registry.example.ms/v2/kubewarden/policies/pod-privileged/manifests/v1.0.10>", source: hyper_util::client::legacy::Error(Connect, Custom { kind: Other, error: Custom { kind: InvalidData, error: InvalidCertificate(UnknownIssuer) } }) })))

read the docs: https://docs.kubewarden.io/howtos/custom-certificate-authorities