Static Talk:Network/802.1X client settings
Additional NetworkManager configuration steps
I do not have the file /etc/ssl/certs/DST_Root_CA_X3.pem on my system (current version of Fedora Workstation) but using the CA bundle worked: /etc/ssl/certs/ca-bundle.crt
Also "DST Root CA X3" is now called "TrustID X3 Root", you might need to look for the new name on some systems.
And I had to restart NetworkManager to make it work:
sudo systemctl restart NetworkManager
