The whole setup works just fine if I select "Do Not validate" for the CA Certificate.

I get the error "eap_peap: TLS Alert read:fatal:internal error" when using the freeradius generated CA Certificate that I exported from pfsense.
I exported the freeradius-ca.crt and imported it into my phone as a wifi ca certificate. But when I select it when joining the network, it just gives me that error.

I thought I export the freeradius CA cert and use that as the verification cert for the wpa enterprise connection. Is this not what I am supposed to do? I don't want to leave the ca cert option in my phone as unverified.