Eric, what were you using for SSL on the old 2.3.3 server? The nsssl
binary from AOL?
It's been so long now I'm not really sure, but I believe that
when I switched a site from AOLserver 2.3.3 to 3.x, I did have to get
new key and cert files. I think even using nsssl for both 2.3.3 and
3.x, that was still the case, but I'm not certain. And switching to
nsopenssl for the 3.x server (even though nsopenssl is better) makes
it even more likely that your file formats aren't compatible...
I would ping Scott Goodwin and ask him if there's any way to get
nsopenssl to read or translate old nsssl key/cert files from 2.3.3.