This is what I have tried
sudo trust anchor --store ./golang-tls.pem
p11-kit: couldn't create object: The field is read-only
p11-kit: 1 error while processin
(trusting the exact same certificate on Alpine Linux was much easier 
)
More importantly, even if the above command completes without error, following a
sudo update-ca-trust
I still see the Error: self-signed certificate 
the above error is from node but curl is ok, so I’ll close this based on the latter.
(P.S. I’ve also fixed node code now.)