Well, I didn’t give up after all. I found a local consultant who came in and set up the connection in a couple of hours. He imported one cert onto box2, added some routing statements on box1 and box2, waved his magic wand and, voila! Success.
I am now stress testing it before it’s deployed on our network. Testing is going well so far.