aaaand success with #xmpp !gnusocial /cc @n2admin
it was a combination of a rather stupid ypot on my part, but mostly, certificate permissions, order of cert in the bundle (backwards from the "pem" format). in any event, xmpp@crosstalk.co came online and said 'hey you..verify!'