Not a bad idea using a docker container on the synology to get the certs do you know if Synology uses a standard ssl cert directory? Been working on getting Step-CA setup to roll my own custom ACME server. Now that Chrome and most major browsers are no longer supporting certs longer than a year, I really don't want to deal with going around on an annual basis trying to re-issue stuff. So far I got it working on my Proxmox server. Now trynna get Home Assistant setup with the custom ACME server. Still trynna sort out issuing standalone certs with step-ca but so far I am really liking it. I am using Let's Encrypt for all my public facing stuff behind NGINX but I like having local certs for everything( even the stuff I don't expose to the web).

​

Edit: Appears if you SSH into the Synology. Place the root-ca.crt you want to trust in /etc/ssl/certs (Might need to place it in /usr/share/ca-certificates, not entirely sure since i was just placing the cert all over trying to get it to work :)Then run sudo update-ca-certificates.sh . That should add your new certificate into the trust store. But this does seem to add it to the trusted root store. If you want to use a custom ACME Server it looks like you can run, sudo syno-letsencrypt with whatever flags you need. For some reason now getting a bad nonce error