Hello @ooii,
As nginx uses SNI you should provide the server name in openssl command to get the right cert served by nginx.
openssl s_client -connect plex.mydomain.com:443 -servername plex.mydomain.com
Cheers, sahsanu