SSL Connection Refused from ChefDK client

I am setting up a hosted ChefAutomate instance on AWS Ubuntu. Client install of ChefDK connects via SSH just fine. However the SSL certs are refused when doing "knife ssl fetch" with this error:

ERROR: Network Error: No connection could be made because the target machine actively refused it. - connect(2) for "localhost" port 443
Check your knife configuration and network settings

I have checked my instance's incoming network ports and the VPC and Security Groups settings and all seem to be fine. I can HTTP to the instance and I get the screen that says it looks like I am looking for the Chef GUI which isn't installed.

Anything else I can check?