check if haproxy correctly loads certificates, or if does not find them and generates its own.
This could be done with a script automatically:
echo | openssl s_client -showcerts -servername tuttorotto.biz -connect tuttorotto.biz:443 2>/dev/null | openssl x509 -inform pem -noout -text