This is why you should do `openssl s_client -connect <your site>` to verify TLS when changing your server's TLS certs.