Productive systems can neither rely on any default keys that were installed with some older version nor on the development and test bootstrapping tools. Certificates must instead be issued by real Certification Authorities (CA), taking care that they fulfill all requirements, and then installed prior to the first start of the system. If IDM has already been used with test certificates, these insecure certificates may have been used by the system. They must be replaced with proper ones as described somewhere.
Nexus Documentation
CURL vulnerability information (CVE-2023-38545) - Nexus awareness advisory on Microsoft's update KB5014754
General
Content
Integrations