Thanks Maxim,

Looks like the issue was a bad root cert in the chain. The CN was identical to what the intermediate called out but it wasn't the one that had issued the intermediate. Also didn't know that setting error to info would give us the ssl error information. We had it set to debug but couldn't figure anything out from that.