Something along the lines:
- driver behavior in 4.0 changed, doesn't trust self-signed certs anymore, but encrypted=true by default
- if you don't have a proper trusted certificate (e.g. in Docker) you have to use encryption=false
- link to davids article for lets's encrypt