Help on HTTPS configuration for internal network

Team,
I have my own certificate authority for the internal devices. I do NOT want to open to duckdns or exernal internet.
I want HomeAssistant to be esposed on https:// not http://

I’ve read instructions here HTTP - Home Assistant (home-assistant.io) and I have created a signed cert for homeassistant.
I’ve got the decrypted private key and put them in the /ssl/ folder.

Then I added

http:
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

Now the fullchain is root cert - intermediate cert - homeassistant cert one after the other
privkey is the decripted homeassistant private key

the config is validated and I can restart homeassistant…

… but…

… I always end up in safe mode AND the https does NOT work. I can only access via http

what am I doing wrong? I’m following all the instructions

thanks
M

team,
no one able to help me ?