Jay, it appears that the ModuleDir parameter in the nsopenssl has no effect. The error message indicates that nsopenssl is looking for the .pem in the root directory. I checked my configuration and noticed that I don't use the ModuleDir parameter at all. Instead I refer to the .pem files by there full path.
Give that a shot and report back if you can.
/Bart