Weppos -- thanks. Tried on two platforms: WinXP Pro (probably will never work, but we use a few older machines as kiosks in the library and are not going to pay for an upgrade license); and a number of desktops with Debian, Ubuntu and Mint -- now finally working after installing the four certificates (as in my first post) and rebooting (a rare thing to have to do with Linux boxen.)
Many thanks all around.
I think this resolves the problem, unless someone has a fix for WinXP?
Best -- Paul