This is just how root certificates work no? The assumption that the Russians will abuse this is just as valid for any US company, given what we know form the Snowden leaks.

all good now, I think it was a syntax issue on my part. I could connect fine before making the changes but after checking the spaces for the YAML file its all working now

Thank you, I think it did not like the syntax I had when uncommenting all working now :)

Thanks, will take a look a my setup