A proxy TLS chain looks correct in openssl checks and one app still fails

Interactive tests look good while one long-lived client keeps failing validation after a chain update.