pfSense

How did they get there?

We'll need to see a copy of the relevant portions of your config.xml not just screenshots.

i checked the config file and i cant seem to find it in config file but it shows on my cert list on the gui.

the config file has <cert/> only after which my other cert, can that be causing it?

no idea how it got there but in older snaps etc i used to use SSH so it might have generated that time and when i stopped using it and disabled it, it might have left that

ok figured it out, there were one left over <cert/> and <ca/> tag before the actual ones with valid entries, removed both and it solved the issue, probably it would be good to make the gui ignore such entries or the config upgrade utility detect and delete them for other such stuff or atleast make the delete button in different places be able to delete them.

Applied in changeset 40e6086ada6b73f6432b7ac93d4b376941028b09.