The cert included in the repo: \Foundation-spa-react\src\Headless.Cms\App_Data\certificates\my.pfx, has a password set in appsettings.json. This password is incorrect. I can see this in the CertificateOptions class. On line 33-ish, where is tries to create a new X509Certificate2, it throws throws an error that the password for the cert is incorrect. I had to generate my own cert. In the context of making my own site that will eventually be out on the web, this is fine. But in the context of using Foundation-Spa-React to learn how to architect a headless site, then its a problem that I spent some time trying to troubleshoot.