Description of problem:
When a registered / subscribed 5.8 consumer run yum repolist HTTP Error 502: Bad Gateway is returned.


Version-Release number of selected component (if applicable):
thumbslug-0.0.18-1.fc15.noarch
katello-headpin-all-0.1.110-1.el6.noarch

Steps to Reproduce:
1. Register / Subscribe consumer to SAM 
2. Verify, subscription-manager list
3. yum repolist
  
Actual results:
[consumer]
https://cubert.usersys.redhat.com:8088/content/dist/rhel/server/5/5Server/x86_64/os/repodata/repomd.xml: [Errno 14] HTTP Error 502: Bad Gateway
Trying other mirror.
repo id                   repo name                                       status
rhel-5-server-rpms        Red Hat Enterprise Linux 5 Server (RPMs)        0
rhelcsb                   Red Hat CSB Repo                                0
repolist: 0
[/consumer]

[SAM]
Dec 05 09:12:35 [New I/O client worker #7-1] INFO  org.candlepin.thumbslug.ssl.SslContextFactory - loading thumbslug to cdn entitlement certificate (pem encoded)
Dec 05 09:12:35 [New I/O client worker #7-1] INFO  org.candlepin.thumbslug.ssl.SslContextFactory - Cert is: 
null
Dec 05 09:12:35 [New I/O client worker #7-1] ERROR org.candlepin.thumbslug.ssl.SslContextFactory - Unable to load pem file!
java.lang.NullPointerException
	at org.candlepin.thumbslug.ssl.SslContextFactory.getClientContext(SslContextFactory.java:115)
	at org.candlepin.thumbslug.HttpClientPipelineFactory.getPipeline(HttpClientPipelineFactory.java:44)
	at org.candlepin.thumbslug.HttpRequestHandler.beginCdnCommunication(HttpRequestHandler.java:263)
	at org.candlepin.thumbslug.HttpRequestHandler.access$000(HttpRequestHandler.java:54)
	at org.candlepin.thumbslug.HttpRequestHandler$1.onResponse(HttpRequestHandler.java:161)
	at org.candlepin.thumbslug.HttpCandlepinClient.onCandlepinConnectionClosed(HttpCandlepinClient.java:221)
	at org.candlepin.thumbslug.HttpCandlepinClient.access$600(HttpCandlepinClient.java:60)
	at org.candlepin.thumbslug.HttpCandlepinClient$2.operationComplete(HttpCandlepinClient.java:212)
	at org.jboss.netty.channel.DefaultChannelFuture.notifyListener(DefaultChannelFuture.java:381)
	at org.jboss.netty.channel.DefaultChannelFuture.notifyListeners(DefaultChannelFuture.java:372)
	at org.jboss.netty.channel.DefaultChannelFuture.setSuccess(DefaultChannelFuture.java:316)
	at org.jboss.netty.channel.AbstractChannel$ChannelCloseFuture.setClosed(AbstractChannel.java:359)
	at org.jboss.netty.channel.AbstractChannel.setClosed(AbstractChannel.java:196)
	at org.jboss.netty.channel.socket.nio.NioSocketChannel.setClosed(NioSocketChannel.java:154)
	at org.jboss.netty.channel.socket.nio.NioWorker.close(NioWorker.java:583)
	at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:355)
	at org.jboss.netty.channel.socket.nio.NioWorker.processSelectedKeys(NioWorker.java:280)
	at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:200)
	at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108)
	at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:44)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
	at java.lang.Thread.run(Thread.java:636)
Dec 05 09:12:35 [New I/O client worker #7-1] INFO  org.candlepin.thumbslug.HttpRequestHandler - Subscription id not found on candlepin
[/SAM]

Expected results:
Status should return some number of RPMS and no Bad Gateway error should be returned.

Additional info: