Looks like we have the problem solved. I think somehow certs got corrupted in the upgrade. Regenerating self signed certs, then reimporting commercial certs fixed it and we're up and running.

Thanks all for the help.