Another post falling in the category of "fixed it myself". Turns out nothing wrong with the certificate. I didn't realize that the outbound rules in 3CX still had to be configured as the PSTN calls are routing from Teams to the 3CX server. Once those were set, the calls completed. Hopes this...