Issue curl: (60) SSL: no alternative certificate subject name matches target host name

[manojo]

Server operating system version

Ubuntu 22.04

Plesk version and microupdate number

18.0.60.1

Product version: Plesk Obsidian 18.0.60.1
OS version: Ubuntu 22.04 x86_64
Build date: 2024/04/21 18:00
Revision: fb95e147edf43efc98862c72507bfe703444b441

Server: Amazon LightSail

Issue: I cant CURL my api server that is hosted in the same server under different domain



What I did so far:

- Disabled the expired DST CA X3 root certificate. (Cert wasnt there) Resolved - cURL from PHP gives error 60
- Tried to curl from many other servers I own (Also localhost) And everything is working
- Reinstalled the certificate from the subdomain (Lets Encrypt) several times.
- Added TXT Registry to the api domain as additional step of installing certificate
- tried curl with -k flag, I could access the server but with a redirection message (http went forced to https, and I dont want run curl on http so this is not an option)
- Tried to install https://curl.haxx.se/ca/cacert.pem file into /etc/ssl/certs/
- Updated and upgraded the certs with the command `sudo update-ca-certificates --fresh` and got this warning message:


Any help will be appreciated. I just want to CURL my server

 

[Kaspar@Plesk]

Does your server use NAT?

 

[AYamshanov]

"no alternative certificate subject name matched", sounds strange, what about...

curl -vsl -o /dev/null https://apidev.[...]
[...]
subjectAltName: host "apidev.[...]" matched cert's "apidev.[...]"