HTTPS endpoint cannot be hit externally

I have an SSL cert properly installed in Apache. If I run openssl s_client -connect 127.0.0.1:443 it shows no errors, and I see the cert being delivered and the endpoint responsive.

I have run iptables -p tcp --dport 443 -j ACCEPT to open that port on the server.

This is an AWS server so I have also allowed 0.0.0.0/0 to the in-bound rules on port 443.

However, I still cannot hit the domain externally. I get a ERR_CONNECTION_REFUSED message from the browser.

Port 80 is responsive externally, so I know the site is working. Any ideas?