Remote access stuck, forces relay - needs new certificate

PMS 1.43.3.10828, native Apple Silicon macOS.

Remote Access briefly turns green, then red.

Manual forwarding is:
public TCP 32401 → 192.168.50.207 TCP 32400

The external port is continuously confirmed open by CanYouSeeMe.
Public/WAN IP is 188.211.162.x.

PMS self-test fails with:
curl error 60: SSL certificate problem: unable to get local issuer certificate

The plex.direct CertificateUUID is:
908edc205bfe41c69548d583d74f4110

Removing the local CertificateUUID/Version and restarting caused Plex
to restore/reuse the same UUID. Can any Plex staff member please reset/re-provision the server’s plex.direct certificate or verify its certificate chain.