I can't get nak to…

I can't get nak to talk to start9's wss nostr relay. When I do:
% nak req -k 1 -a wss://wv5av2f<...redacted>.local

I get:

"x509: “nostr.embassy” certificate is using a broken key size"

So I tried:
% GODEBUG=x509ignoreCN=0 nak req -k 1 -a

But still get the same error. Any ideas?
(JS clients in a brave browser work fine using the cert in the MacOS Keychain)

#nak #start9