I'm trying to use certmonger's dogtag-submit helper like this:

/usr/libexec/certmonger/dogtag-submit -vv -E https://dogtag.test.org:8443/ca/ee/ca -A https://dogtag.test.org:8443/ca/agent/ca -T caAgentServerCert -i /root/ca.crt -c /root/test/cert.pem -k /root/test/key.pem foo.csr.pem

I can perform the same GET (from the debug results from dogtag-submit) using curl with the same cert.pem and key.pem and the request returns a valid response.

What am I doing wrong?