Next step to debug would be to run openssl s_client with flags to dump verbose info about the key exchange and validation.

2017-03-09T22:20:43Z