It turns out that the CDN77 test failures weren't caused by certificate issues, they were caused by my copying the wrong domain into the test config.