Install of keycloak completely break web interface

Everything was OK for me to upgrade to 5.2 except keycloak, I just need it for nextcloud, bur anyway,
I installed Keycloak for compatibility to upgrade to 5.2 but the install failed and I have lose the web interface, because apache2.service do not start because of a missing certificate.
I tried to generate the missing certificate with this

univention-certificate new -name ucs-sso-ng.domain.pf

Now I’m stuck

the /var/log/apache2/error.log says

[Thu Mar 06 10:05:19.805750 2025] [ssl:emerg] [pid 1356] AH02572: Failed to configure at least one certificate and key for ucs-sso-ng.domain.pf:443
[Thu Mar 06 10:05:19.810768 2025] [ssl:emerg] [pid 1356] SSL Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no certificate assigned
[Thu Mar 06 10:05:19.810810 2025] [ssl:emerg] [pid 1356] AH02312: Fatal error initialising mod_ssl, exiting.
AH00016: Configuration Failed

any advice or direction ?

I did a Rollback anyway.

every times I install Keycloak, I can not log in as admin on ucs-sso-ng.domain/admin
is there a password reset, or what am I missing ?