mind pasting the two lines right above

BEGIN CERITIFICATE

for your root cert(from

s_client

output)?