That was it! The config file was pointing to the certificate files in
archive.
Fixed and it works, thanks so much.
Fwiw, I am serving using jupyter, so the relevant config is located in
~/.jupyter/jupyter_notebook_config.py, under keys c.NotebookApp.certfile
(cert.pem) and c.NotebookApp.keyfile (privkey.pem).