Yeah, port 443 definitely has to be working for SSL to work.
Your OP said "443 ALLOW ANYWHERE" and I'm glad you figured it out, but I'd like to know, for future reference, where port 443 was still closed? You also said you used vestacp to fix it. What exactly did you do, in vestacp to fix it?