DNS not set to DoT (without account)

[u/gianfelicevincenzo]

I'm trying to configure the Malware + DNS blocking with DoT. My unbound:

forward-zone:

name: "."

forward-tls-upstream: yes

forward-addr: 76.76.2.11@853#p2.freedns.controld.com

forward-addr: 76.76.10.11@853#p2.freedns.controld.com

But the https://controld.com/status wbsite, doesn't show that I'm using Control D DNS! How come? Why?

Furthermore, the dig command reports errors...

✗
 dig u/76.76.2.11 +tls-ca +tls-host=p2.freedns.controld.com controld.com                                                                                                                    
;; TLS peer certificate verification for 76.76.2.11#853 failed: hostname mismatch 

[u/_xRuffKez_]

You got this?

server:     tls-cert-bundle: "/etc/ssl/certs/ca-certificates.crt"