Answer
If you're using a certificate not issued by a recognized public CA, check whether that certificate has actually been imported into the specific reporting-related pods that need it — Crystal/operational reporting components requiring SSL communication need the certificate present in their own pods specifically, not just somewhere generally in the cluster.