Traefik v3 getting SSL handshake errors

Traefik Traefik v3 (latest)
1

When I try to access any of my ingress routes (or just localhost) I get an SSL error like this;

$ curl https://localhost
curl: (35) OpenSSL/3.0.13: error:0A000438:SSL routines::tlsv1 alert internal error

Using the http works fine. I use cert-manager to manage the certificate, and it worked fine before.

Traefik app;

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: traefik
  namespace: argocd
spec:
  destination:
    namespace: traefik
    server: 'https://kubernetes.default.svc'
  source:
    repoURL: 'https://traefik.github.io/charts'
    targetRevision: 30.*
    chart: traefik
    helm:
      values: |
        additionalArguments:
          - --providers.kubernetescrd.allowCrossNamespace=true
          - --entrypoints.name.http3
          #- --entryPoints.web.forwardedHeaders.insecure
          #- --log.level=DEBUG
          #- --serverstransport.insecureskipverify=true
        ports:
          web:
            redirectTo:
                port: websecure
        tlsStore:
          default:
            defaultCertificate:
              secretName: wildcard-kreato.dev-tls
  sources: []
  project: default
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true

Traefik ingress;

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: mirror-ingress
  namespace: nginx
  annotations:
    #traefik.ingress.kubernetes.io/router.entrypoints: web
    #traefik.ingress.kubernetes.io/router.tls: "true"
    cert-manager.io/cluster-issuer: mainissuer

spec:
  rules:
  - host: bin.kreato.dev
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: webserver
            port:
              number: 80
  tls:
    - secretName: wildcard-kreato.dev-tls
      hosts:
        - bin.kreato.dev

I am on Traefik version 3.1.2, Helm chart 30.1.0