Https on new install

PowerShell Universal
1 
Product: PowerShell Universal
Version: 2026.1.3

I’m struggling with getting https working on a new install.

I’m using the default 5001 installation port as we’re putting a couple of the servers behind a load balancer in HA mode. http on port 5000 works great, but all I get back on 5001 is “ERR_CONNECTION_CLOSED”.

Here’s my current appsettings:

{
  "Kestrel": {
    "Endpoints": {
      "HTTP": {
        "Url": "http://*:5000"
      },
      "HTTPS": {
        "Url": "https://*:5001",
        "ClientCertificateMode": "RequireCertificate",
        "Certificate": {
            "Subject": "CN-FROM-CERT",
            "Store": "My",
            "Location": "LocalMachine",
            "AllowInvalid": "true"
        }
      }
    },
    "RedirectToHttps": "false"
  },
  "Plugins": [
    "SQL"
  ],
  "Data": {
    "RepositoryPath": "%ProgramData%\\UniversalAutomation\\Repository",
    "ConnectionString": "Server= SQL-DB;Database= powershell-universal;Integrated Security=true;"
  },
  "Mode": "Server",
  "PSUTelemetry": false
}

I’ve also tried replacing the Subject line with Thumbprint, but same issue.
There’s the following from the docs, but no indication where to put it:

"ClientCertificate": {
  "Enabled": "true"
},

I’ve checked in the system logs, but apart from the following line, I’m not sure what else to really look for…

Now listening on: https://[::]:5001