On the directory with the certificate:

-bash-3.00$ ls -Fla /usr/local/certs
total 16
drwxr-sr-x 2 root root 4096 Jan 3 12:04 ./
drwxr-sr-x 14 root root 4096 Jan 3 12:04 ../
-rwxr-xr-x 1 root root 993 Jan 3 12:04 f73e89fd.0*

These match the ownership/permissions on the server at the client where the application is working correctly.