This message was deleted.

in case somebody's interested, don't use the same

commonName

for CA and Client cert.. silly mistake.