I have had a few more bumps on this ride.
We are using internal certificates and the GSK8 is not handling the chain of certificates. For some reason, our ROOT is not marked critical for BasicConstraints extension and our intermediate is. Not sure yet how to resolve that. Hoping the PMR will advise how to handle it.
I did revert to a Self Signed certificate using the gskkyman method. Following that, I was able to setup SSL from the client to the server successfully.
Note in Step 2 in the guide, it is missing instructions to create the stash file.
From the main gskkyman pannel do 2. Open DB, enter the db name, enter the password, select 10 to store database password.
It will display the path and file name of the stash file required for your ars.ini in Step 3.
Now, I have a problem with my remote loading of PDF documents where it is now picking up extra characters to the AG name causing it to fail. Will start looking at the local report specification exit.