this was caused by an expired SSL cert. Some software (mod_security?) was forcing HTTP while the cbsubs plugin was forcing HTTPS which caused a redirect loop where I could not see the actual error. So, not a CBsubs issue at all.
CB 2.3, CBsubs 4.3, PHP 7.1, J! 3.9.X