We've found that you need to download the site certificate and the certificate chain into the folder for openLCA 2.X to work with collaboration server 2.X, at least in our environment. For example, saving the certificates as "domain.com.pem" and "domain.com-chain.pem" worked for us.