Hanah - I can tell you that a CA-signed certificate from Comodo or other signing authority would never be valid against a machine name:
tss-Prairies.esri.local
you are going to have to assign a valid alias to the machine with a dns ending that the cert was issued against, like esri.org, esri.net, esri.com etc.
That has to be in place for collector to be accessible externally.