Looks like strict-ssl did the trick.