problem was solved btw
needed to get the sectigo intermediate certificate, and append it to my ssl cert *after* the actual cert, and done
finally the end of unable to verify certificate error in go and curl and wget on https://mleku.dev
previously, if you used curl on that address, on linux, it would complain it couldn't verify the certificate, but the browser has no problem (because it has the intermediate, i suppose)
now, the webserver is giving out the intermediate and no problems anymore
fucking
finally
this actually solves the problem i was having with letsencrypt throttling my cert issuance on my wildcards