Apparently this server is requiring client certification[1].
Now to skim nsd.tcl again for some kind of SSLRequiresClient or something.
1. http://www.lists.aldigital.co.uk/apache-ssl/msg01837.html