Integração SSL, OpenSSL 1.1.1f e Gerencianet

ServerAdmin webmaster@localhost
ServerName webhookyoudo.cloudns.nz
ServerAlias www.webhookyoudo.cloudns.nz
DocumentRoot /home/ubuntu/www


ErrorLog ${APACHE_LOG_DIR}/webhook.error.log
CustomLog ${APACHE_LOG_DIR}/webhook.access.log combined

SSLEngine on
SSLProtocol -all +TLSv1.2

SSLCertificateFile /etc/letsencrypt/live/webhookyoudo.cloudns.nz/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/webhookyoudo.cloudns.nz/privkey.pem

#Chave pública da Gerencianet
SSLCACertificateFile /home/ubuntu/www/cert/chain-pix-prod.crt

# mTLS Gerencianet
SSLVerifyClient require
SSLVerifyDepth 3

# Tratando o /pix, redirecionando as requisições sempre para /webhook
Alias "/pix/" "/home/ubuntu/www/index.php"
Alias "/pix" "/home/ubuntu/www/index.php

Que versão do OpenSSL está instalada ?

Esta: OpenSSL 1.1.1f 31 Mar 2020

Se for a versão com backports de bug fixes do Ubuntu tá ok:
dpkg -l openssl
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-==================-============-============================>
ii openssl 1.1.1f-1ubuntu2.16 amd64 Secure Sockets Layer toolkit>

essa 'a minha saida do dpkg -l openssl

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-==================-============-============================>
ii openssl 1.1.1f-1ubuntu2.16 amd64 Secure Sockets Layer toolkit>