Our APIs served via “api.nutrien.com” require inbound connections to use SNI (Server Name Indication).   If your configuration does not support SNI, you must instead connect using our API provider’s default certificate, available at “https://nutrien-prod-prod.apigee.net”.  This default certificate is rotated periodically; to be notified when this occurs, please subscribe to the status page at https://status.apigee.com and click on the [Subscribe to Updates] button.