first, i needed to convert the ssl key to the old format, using this command:
openssl rsa -in cert.key -out cert.rsa.key
(which is referenced at https://docs.platform.sh/user_guide/using/going-live.html#generate-csr)
even though i added the cert with the cert and key, using: