@SeanWrightSec Can I suggest in your openssl step including -servername so that SNI is set appropriately. Otherwise you may get a default cert back and start troubleshooting the wrong thing... never happened, honest