Is your server usinmg a Self Signed SSL Cert or a real SSL Cert? Self Signed are not accepted.
The CLI won’t check certs as it will consider certs installed to your system.
A callack has to be
- over ssl
- preferably “standard” port (443) to avoid schnangians
- using a real SSL cert
- uses a “domain name” and not an IP Address