x509 certificate issue, building on BalenaOS device, pushing to registry hosted in EC2

For anyone who comes across this, there is a reference in Using real (not self-signed) certificates around Mar '19. I haven’t actually worked out how to use that information, but it’s there.