> [...] when I learned later down that you can add CAs to the certificate store of an Apple TV.

Same. I would not have guessed that that's possible but I guess I never tried to access a resource without a valid certificate chain on Apple TV.