Another reason a mismatch can occur is if you enter an IP address rather than a host name in the client. Does the common name on the certificate match the host name of the server that sends it? A mismatch can occur if a load balancer redirects Horizon Client to a server that has a certificate that does not match the host name entered in Horizon Client.Has the certificate expired, or is it valid only in the future? That is, is the certificate valid according to the computer clock?.
Is the certificate intended for a purpose other than verifying the identity of the sender and encrypting server communications? That is, is it the correct type of certificate?.Server certificate checking includes the following checks:
A certificate is a digital form of identification, similar to a passport or a driver's license. Server certificate checking occurs for connections between Horizon Client and a server.