I managed to find relevant logs with:
sudo tail -n 100 /var/log/syslog
There were a bunch of issues I remedied:
In kibana.yml I had a line "elasticsearch.url: [..." which was erroring, it needs to be elasticsearch.hosts.
I had to provide it the full path to the ssl certificate and key, and give it permissions to these, though after doing so it now starts, but errors with:
FATAL Error 0906D06C:PEM routines:PEM_read_bio:no start line
Apparently kibana can't read .p12 certs, so will need to generate ones in .pem format. Will report back on this.