Thanks to nickf I learned that I'd omitted certs in the chain when I did the installation. all is well now. Thanks nickf!