SOLVED: After upgrading and replacing certificate mobile apps mostly don't work, browser fine

[counternihilist]

Not exactly satisfactory and I didn't find the root cause, but I ended up just creating a separate dynamic DNS subdomain to the same public IP, and routing the specific ports to my NAS via that subdomain while keeping all other traffic routing to my main apache server. That seems to avoid whatever conflict there was between the devices, and my apps now work. I still don't know why this was necessary.