Potentially there are 3 TLS certs involved: the one Traefik is serving to the client/browser, the one to the auth service when using ForwardAuth inside Traefik and the one to your target service within Traefik.
None of those have anything to do with daemon.json.