Yes, App.tk.eam.ssl will provide more information about the problem in the SAS log. You can also test the connection to the SAS LASR Authorization service using CURL command (run it from the compute tier):
curl -v --cacert /<SASHome>/SASSecurityCertificateFramework/1.1/cacerts/trustedcerts.pem https://<MIDDLE_TIER_FQDN>:<PORT>/SASLASRAuthorization
... View more