Elasticsearch shield SSL nodes unavailable

That should have your private key and signed request in it in addition to the CAcert.