the certificate must be installed on the webserver that is serving the API. And reach the server via 443 port, not 7011.