ME4 SSL Cert from CA

have generated key and csr with different specs and gen'd cert from internal CA.  Nothing new.. have done this on dozens of times on other platform.   

uploaded the cert and key to mgmt controller per doc and restarted mc (done both and one at a time)..

see pending cert and key files when ls after put/before restart of MC's.

After reststart, files are gone, but system self cert still loaded when browse to UI.. 

Anyone else have any luck?? 

Have been doing req/cert with SAN extensions, so going to try without as one of few things haven't tried yet to see if the ME4 just doesn't like it.. The me4 doc's so sparse on this topic.

thx