Figured it out. Rancher comes up properly with letsencrypt-prod cert. Now onto why harvester is complaining whenever I try to add it to rancher...cetificate signed by unknown authority.