Minio webui infront of haproxy giving error "invalid login"

I have a minio cluster setup and the webui of minio is on port 9001. it fails to login to webconsole. error seen

Below is the config:-

frontend web_console
  mode http
  bind *:9001 ssl crt /etc/haproxy/certs/hapxy.pem
#  stats uri /haproxy?stats
  default_backend minio_console

backend minio_console
mode http
  balance leastconn
  server minio1 172.16.0.87:9001 ssl check verify none
  server minio2 172.16.0.89:9001 ssl check verify none
  server minio3 172.16.0.90:9001 ssl check verify none
  server minio4 172.16.0.88:9001 ssl check verify none

Error logs -

May  1 02:22:08 ha-prxy haproxy[11629]: 192.168.200.2:49912 [01/May/2024:02:22:08.123] web_console/1: SSL handshake failure
May  1 02:22:08 ha-prxy haproxy[11629]: 192.168.200.2:49913 [01/May/2024:02:22:08.873] web_console~ minio_console/minio1 0/0/6/1/7 401 382 - - ---- 1/1/0/0/0 0/0 "POST /api/v1/login HTTP/1.1"
May  1 02:22:10 ha-prxy haproxy[11629]: 192.168.200.2:49913 [01/May/2024:02:22:10.403] web_console~ minio_console/minio2 0/0/4/2/6 401 382 - - ---- 1/1/0/0/0 0/0 "POST /api/v1/login HTTP/1.1"

I have generated cert for the entire setup using certgen -host <minioip>, <miniohostname> ,<haproxyip> ,<haproxyhostname> using certgen from GitHub - minio/certgen: A dead simple tool to generate self signed certificates for MinIO TLS deployments

can anyone tell me how to fix this?