I tied all your suggestions, but no luck. I located de certs under /etc/mysql/mariadb.conf.d/mysql_certs/*.pem, double checked the mysql user and had a look to the docu on mariadb.com....no luck. All the creation commands looked very similar.
Than I decided to delet the certs again. Recreated it with the exact commands from docu (see link). And also locaded it like shown on other docu page for server config: /etc/mysql/certs/*.pem. I set ownership to dir and files for mysql:mysql and restarted whole engine. Then...magic...executed 'systemctl restart mariadb' and no error occured. I am not sure if it was the recreation of certs or the relocation one step closer to the root.
Thanks a lot for your answer...
https://mariadb.com/kb/en/certificate-creation-with-openssl/

CAPTCHA