Interesting, thanks for the confirmation, and again for the detailed response.
Can you try changing elasticsearch.ssl.verificationMode from full to certificate in your kibana.yml, and let me know if that changes anything? I'm trying to narrow down the scope a bit.