If anyone else here uses AdGuard, the latest version of their app rejects the affected certificates. 👍