[NovemberWhiskey]

Probably just depends what order your TLS implementation is deciding to complain about the issues: it's not only self-signed but has no DNS SAN and the CN also mismatches.