Err, nevermind on the above. I just realized that curl's not going to see a cert that only rancher has been configured to reference. I'd need to configure something at OS level to get curl to work.