The best way to use openssl to verify a local cert is shown here (by a certbot dev):
What command are you trying when your webserver says "Unable to validate web_service_certificate"?
Can you describe your web server? And, is this still your ans.red domain from earlier posts? If not, which domain is it?