curl error 60: the message text fingerprints the TLS backend, not your certificate
The same untrusted root produces six different sentences depending on which TLS library curl was linked against, and on wolfSSL it is not even error 60 but 77. Read the wording as a build identifier, run curl -V first, and only then go looking at the trust store.