oVirt 4.1.4

I have imageio proxy working with web ui on firefox.

On Chrome 59 I read bz# https://bugzilla.redhat.com/show_bug.cgi?id=1430598

and set "EnableCommonNameFallbackForLocalAnchors": true.

However the upload fails with

Make sure ovirt-imageio-proxy service is installed and configured, and ovirt-engine's certificate is registered as a valid CA in the browser. The certificate can be fetched from https://<engine_url>/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA

In the terminal I see 

:ERROR:cert_verify_proc_nss.cc(923)] CERT_PKIXVerifyCert for XXXXXXXX failed err=-8172

for both the web UI and imageio proxy. Any suggestions?