Hello. I noticed that you created a node.crt for a hostname called live. If you do not want to use this as the host, then I would rm tls/node* and recreate the node cert.
I created my certs using this:
dgraph cert
dgraph cert -n $(hostname)
dgraph cert -c user
Let me know if this fixes your setup.