Solving Android CA Trust Issues for Local Homelab Services with Route 53, Let's Encrypt, and BIND9

I run OpenProject and Nextcloud on my home network, both behind an internal certificate authority I run with PicoCA. Browsers on my laptop are happy to trust that root cert once I install it, but the official Android apps for both services flatly refuse to talk to a server whose certificate they don’t recognize. No amount of “install anyway” in Android’s certificate settings fixes it, and I didn’t want to root my phone just to sync a project board and a file share. ...

July 25, 2026 · 11 min · Michael Locatelli