Hi,
SubjectAltName was included in the cert so this seems unrelated. I still tested it but it
didn't have effect on the outcome.
From what I can gather if I upgrade the openssl package to 3.0.1-12.el9 it stops working.
The latest version that I can use is 3.0.1-5.el9