Just want to add some data points here for K2021.2. We had the same cert issues as in this post about Server 2022. Some errors you will see:
Active Home Page (Error Code -181):
No EDD. No Enterprise Search (Trust error). No Kinetic pages.
Instead of managing our own certs, we reinstalled on Server 2019.