I think previously we were using the CA key/cert for the Apache certs. Worth checking.