unable to get local issuer certificate about docker-registry-browser HOT 11 CLOSED

#ssl-test.conf

ssl_protocols               TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers   on;
ssl_dhparam                 /etc/nginx/certs/dh.pem;
ssl_ciphers                 "EECDH+AESGCM:EDH+AESGCM";
ssl_ecdh_curve              secp384r1; 
ssl_session_cache           shared:SSL:10m;
ssl_session_timeout         10m;
ssl_session_tickets         off; 
resolver                    8.8.8.8 1.1.1.1 valid=300s;
resolver_timeout            5s;
add_header                  Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header                  X-Frame-Options DENY;
add_header                  X-Content-Type-Options nosniff;
add_header                  X-XSS-Protection "1; mode=block";

ssl_certificate            /etc/nginx/certs/docker-repo.k8s-test.in.crt;
ssl_certificate_key        /etc/nginx/certs/docker-repo.k8s-test.in.key;
ssl_trusted_certificate    /etc/nginx/certs/ca.crt;

repo.conf

map $upstream_http_docker_distribution_api_version $docker_distribution_api_version {
    '' 'registry/2.0';
}

server {
    listen      443 ssl http2;

    server_name  localhost;

    # registry browser
    location / {
        proxy_redirect          off;

        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Port  443;
        proxy_set_header Host              $http_host;

        proxy_pass http://localhost:8080;
    }

    # registry
    location /v2/ {

        client_max_body_size 0;
        chunked_transfer_encoding on;

        if ($http_user_agent ~ "^(docker\/1\.(3|4|5(?!\.[0-9]-dev))|Go ).*$" ) {
          return 404;
        }

        add_header 'Docker-Distribution-Api-Version' $docker_distribution_api_version always;

        proxy_pass        http://localhost:5000;
        proxy_set_header  Host              $http_host;
        proxy_set_header  X-Real-IP         $remote_addr;
        proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header  X-Forwarded-Proto $scheme;
        proxy_read_timeout                  900;
    }

    # auth server
    location /auth {

        proxy_read_timeout    90;
        proxy_connect_timeout 90;
        proxy_redirect        off;

        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Port  443;
        proxy_set_header Host              $http_host;

        proxy_pass http://localhost:5001/auth;
    }
}