operator: Fix certificate rejection