Do you also have a trusted TLS certificate authority? If yes, how has been your experience maintaining and securing it?
None of this is connected to the internet. It is "home lab" stuff.
I have alternatives for so-called "modern" web browsers controlled by advertising companies, too.
For all the third-party-mediated stuff on today's internet I generally have alternatives that let me have more control.