Certificate doesn't match any of the subject alternative names

[maof97]

I had a similar problem like this (Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate")

A reply I got there was:

@ikakavas

We do our best to detect all IP addresses of the interfaces that are up when Elasticsearch is installed and then use them as IP Subject Alternative Names in the HTTP TLS certificate.

So I guess you made the same mistake as me, by installing ES without the later used interface being already present.