In https://lab.nexedi.com/nexedi/slapos/commit/74d18b9d75089a7f2fc1e286d5f2db7649dba749 I switched ERP5 to use caucase certificate, but caucase is not yet usable for this and this caused issues with upgrading existing instances.
We'll maybe try caucase again here, in that case 620c9332 can be reverted if we want to reuse some parts of what was made.