It turns out that the CDN77 test failures weren't caused by certificate issues, they were caused by my copying the wrong domain into the test config.
requested review from @grote
mentioned in commit 977f6540
merged