Walk-through solved it, didn't know it needs to both be trusted and intermediate. Additionally, I was probably putting it as a user cert. Secondary issue I had was the system generating the cert was 3 seconds faster than my network (make sure they're all using the same timeserver), so I got...