have you tried to connect with mosquitto_pub (instructions in the gist) and do you get cert errors with that?