Looks like the bindaddr needs adjusting.
Your /etc/asterisk/http.conf should have these major lines uncommented and set as such:
enabled=yes
tlsenable=yes
tlsbindaddr=0.0.0.0:8900
tlscertfile=/etc/apache2/ssl.crt/<certfile>.crt
tlsprivatekey=/etc/apache2/ssl.key/<certfile>.key
The tlscertfile and tlsprivatekey parts need to point to your actual certificate files. Also make sure you're using the DNS in the wss line, like
wss://my.server.domain:8089/ws