Step-ca generated expired/invalid certs

[SpiderUnderUrBed]

I am using step-ca with ansible, i automated the providers, starting of the server, certificate generation and the deploying of the nginx container here:
create-cert.yml:
https://pastebin.com/E9ZaWgcA
nginx.yml:
https://pastebin.com/SkJD8Zej

You dont need to understand ansible to see whats going on
Now the issue:

Even if I try to attach the certificate one minuite after its creation it says its invalid, thats about all my issue. and i even set flags for its expirey date, idk why this is happening, and i would like help

my ca.json:
https://pastebin.com/X9E7RnC6

[tashian]

You may be dealing with a time difference between systems.
Try creating the certificate with --not-before -5m to give yourself some leeway on the Not Before value of the certificate.

[SpiderUnderUrBed]

I think the timing issue is sorted but i have another issue:

Looking at the ansible configuration and the image, i am using the correct certificates right? How do i fix this?
My certs arnt password protected, also here is the error:
Upload failed: Certificate is not valid (Could not read certificate from /tmp/2041df3c-ff12-490f-b382-256c59bdd55f/tmp 20C081857F000000:error:1608010C:STORE routines:ossl_store_handle_load_result:unsupported:../crypto/store/store_result.c:151: Unable to load certificate )

[SpiderUnderUrBed]

Ah nevermind that issue, turns out I have been uploading my key twice. I still get the "certificate has expired issue" though.

[SpiderUnderUrBed]

Ah fixed, turns out, that first I used two keys accidentally, than adding my cert, and just now i realized i had a typo in the just before flag, it looked like -1d, it does not support days. and the '-' yeilded an error so it kept on using the outdated one, thanks for your help!