Comment 6 for bug 1594793

I'm not a SSL expert, but I checked with -v to curl for that URL, and it is accepted TLS1.0 connections only.

So I told your script to do the same:

curl_setopt($ch, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_0);

And your script then worked. I'm assuming this means that without this option, your script is attemping to connect with SSLv2 or SSLv3 by default.