I should clarify:
my target value is something like https://www.example.com/test-asana-webhook-handshake
(https definitely works fine and is a real signed certificate, not self signed)
I am looking in my nginx logs and see no access attempts from Asana servers to this URL. But when I access from my browser I successfully get a request in the server log!