Iirc, ejabberd does something wacky with the certificates including the root certificates by copying them into /var somewhere. I gave up on xmpp about 5 years ago. Moved to an interim solution, then changed over to matrix. I can see an eventual element clone coming built on nostr. 0xChat is getting close, but one needs compatible desktop and browser clients. Element.io is an amazing utility.