# Unable to create token getting below error as Failed to determine the health of the cluster

**URL:** <https://discuss.elastic.co/t/unable-to-create-token-getting-below-error-as-failed-to-determine-the-health-of-the-cluster/316039>\
**Category:** Elasticsearch\
**Created:** [October 7, 2022, 7:10am UTC](https://discuss.elastic.co/t/unable-to-create-token-getting-below-error-as-failed-to-determine-the-health-of-the-cluster/316039 "2022-10-07T07:10:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![RChan](https://avatars.discourse-cdn.com/v4/letter/r/eb9ed0/32.png) [@RChan](https://discuss.elastic.co/u/RChan)\
**Post date:** [October 7, 2022, 7:10am UTC](https://discuss.elastic.co/t/unable-to-create-token-getting-below-error-as-failed-to-determine-the-health-of-the-cluster/316039/1 "2022-10-07T07:10:53Z")

</div>

WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [x.x.x.x]; the server provided a certificate with subject  
name,  
fingerprint [629616647bf0e539b0ca8f616b516df4a356f5af], keyUsage [digitalSignature, keyEncipherment] and extendedKeyUsage [serverAuth];  
the session uses cipher suite [TLS\_AES\_256\_GCM\_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names  
[DNS:cl-elastic-canopy-qa.firmenich.com,DNS:cl-elastic-canopy-qa,DNS:gva6412,DNS:gva6412.gva.europe.firmenich.com,DNS:gva6405,DNS:gva6405.gva.europe.firmenich.com,  
DNS:]; the certificate is issued by ;  
the certificate is signed by (subject fingerprint   
{trusted issuer}) signed by (subject fingerprint [ {trusted issuer})  
which is self-issued; the certificate is trusted in this ssl context ([xpack.security.http.ssl  
(with trust configuration: Composite-Trust{JDK-trusted-certs,PEM-trust{  
/etc/elasticsearch/certs/cl-elastic-....................)  
java.security.cert.CertificateException: No subject alternative names matching IP address xxxx found  
;;  
;;  
;;  
;;

ERROR: Failed to determine the health of the cluster.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 7:11am UTC](https://discuss.elastic.co/t/unable-to-create-token-getting-below-error-as-failed-to-determine-the-health-of-the-cluster/316039/2 "2022-11-04T07:11:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
