Once I fixed issue #7525, I could pass traffic for HTTP and HTTPS HTTP/1.1 with the certifier plugin. But for HTTP/2 traffic I would get a 500 response. Looking at the debug messages, it appeared that the HttpSM was very insistent about doing a DNS lookup on the domain.
Eventually tracked it down to the fact that the accept object transparent flags were not being propagated properly to the Http2Streams. I am putting up a PR that fixes the issue, but perhaps in not the most beautiful way.
This is observed working on the 9.1.1 codebase.