Hi @rik
Perhaps If you showed the entire curl -v command and output I might be able to help. It should show what you're sending and what available SAN in IP are available to be matched.
that snippet is not really helpful.
You mentioned containers if you showed a docker compose we might be able to help. We're are trying to help solve this and you're giving tiniest slivers of information.
More information is the quicker way to solution than feeling around the elephant... I understand the trade-offs of security and stuff like that
If you want to anonymize things you can do that just be consistent.
To generate new certs perhaps look at this ..