10.8 OIDC: OpenIdConnect:Curl error: self signed certificate in certificate chain

I will check 2.9

Linux desktop is SUSE Tumbleweed VERSION=“20210801”

SSL Labs: idp has b rating as forward secrecy is not active, owncloud server has the same, but HSTS is active with the recommended time limits (16000 i think)