Pulled out good ol' wireshark. It's the server that's erroring on the TLS handshake.