Enable mTLS on Admin REST API

I have deployed the Admin REST API in the brokers with mTLS activated, I can connect from curl, with client certificates, but when I create a CRD KafkaRestClass with mTLS specified:

apiVersion: platform.confluent.io/v1beta1
kind: KafkaRestClass
metadata:
  name: default
  namespace: confluentinc
spec:
  kafkaClusterRef: 
    name: kafka
    namespace: confluentinc
  kafkaRest:
    endpoint: https://kafka.confluentinc.svc.cluster.local:8090
    authentication:
      type: mtls
    tls:
      secretRef: kafka-tls

the operator shows the error “bad certificate”:

Warning	{"object": {"kind":"KafkaRestClass","namespace":"confluentinc","name":"default","uid":"8dc4921b-e847d699c5e3","apiVersion":"platform.confluent.io/v1beta1","resourceVersion":"30896438"}, "reason": "Warning", "message": "https://kafka.confluentinc.svc.cluster.local:8090/kafka/v3 remote error: tls: bad certificate"}

this is the same error I get when not using certs. I don’t find any example of KafkaRestClass with mTLS. Is possible to use it? Do you have some example?
CFK v2.2.0 (operator)
CP v6.2.1 (server)