Hello jpat,
If you set destination domain for ZOOM application already, I think you should disable SSL detection for this application and test again. Because this error maybe ZOOM application using unnormal SSL encription.
Pls. keep the PCAP file for make sure that or using action detect_protocol(no) on policy.
BR
Sakkarin Pichetskul