thanks. I actually solved this here:
I typed in the percent as 0.04 instead of just 4. that is a gotcha after building the certs manually.