After having my own MQTT server running on a VPS that is hosted elsewhere from my home assistant server I found that after using lets encrypt it would not allow me to use the .pem files created with home assistant. They worked natively with mosquitto_sub and owntracks but this is the only method I found to work. The change should help anyone else who can't get a secure connection and save hours of searching