I've set up a static website on AWS S3, using a custom domain hosted at Namecheap, and Cloudfront serving over https. I am able to access my site at http://mydomain.tld, which redirects (using a DNS redirect rule on Namecheap) to https://www.mydomain.tld, or by browsing to the https://www site directly.
However, if I try to force https in the browser to the bare domain (https://mydomain.tld), the site fails to load with "ERR_CONNECTION_REFUSED" (via Chrome). I confirmed that both alternate domain names are on the Cloudfront distribution, the SSL certificate contains both domains, and the http->https redirect is working. What could be missing from the configuration?