Certificate is missing SANs
The certificate has no Subject Alternative Name extension.
Why it matters
Browsers match hostnames against SAN, not the legacy Common Name. Without SAN the name check fails.
What to do
Reissue the certificate with the hostname in the SAN list.
Reference
Certificate validity, protocol version, and cipher choice determine TLS trust and strength.