Forgot how not-fun dealing with SSL certs is. Feels like trial and error from the openssl command line (and every registration web site).