I had such error and the root cause was using different hostname than what is in the certificate. Ensure your hostname matches the one in certificate. You can quickly test it by putting it into /etc/hosts if it is not in your dns

Maybe beause of TLS1.3 the error is so cryptic?