Thanks. Only thing I can see in a Wireshark trace is TLS 1.2 so shouldn't be an issue from what I can see but who knows.

So it works without NGINX but that said couple things.

1. Is there a way to just make NGINX accept things and work? Way to prove it's a TLS issue then?
2. What would have changed that would have worked before and now it doesn't? I know the cert was renewed right before the pandemic so may be related but it is a GoDaddy cert so wouldn't be self signed and shows valid.

Thanks.

JR