The default haproxy cert at https://github.com/OpenConext/OpenConext-BaseContainers/blob/main/haproxy28/conf/haproxy.pem is expired.