...also what appears to be a false detection of invalid cert; The provided TLS certificate is invalid: x509: certificate signed by unknown authority
while pasting official CA certificates as downloaded from the Cert provider.
but since we now need to paste all parts at once, no clear indication...