Don`t you have cert and key in this config as I only see the ca and the tls in your config.