Haproxy 2.8 uses self signed certificate - where does it take it from?

Also see post #7 here: