Edit: Solved…firewall blocking 443 
New to EE v4, but loving it so far. Currently, getting stuck on sites that require outside CAs other than LE. Even with LE it does not resolve.
Installed with:
ee site create blog.example.com --wpredi
Everything works fine over http, but when I upgrade to:
ee site create blog.example.com --wpredi --ssl=self
the site refuses to connect. I’ve looked through:
/opt/easyengine/services/nginx-proxy/certs and they are created for blog.example.com
and looking in /opt/easyengine/services/nginx-proxy everything looks correct.
Looking for some guidance – reloading the site or global nginx does not seem to fix anything.