okay. a lot has happened since the OP. was this fixed for arch or are the certificates still ■■■■■■?
in the meantime, what works for me is running beamMP via a podman container with installed fedora - because fedora is apparently the only distro that does not reject SSL certs lol…
check my post for more info (second half of the post)