Well, yeah - Hubzilla uses it's own pem (taken from firefox) and passes it to the curl wrapper (z_post_url() and z_fetch_url()) - I'm suspecting somebody has introduce a typo there, (or done something similar elsewhere). but I haven't looked at that in a very long time now.