On Thu, 2019-10-10 at 10:00 +0200, Laszlo Ersek wrote:
> >          Subject: C=HU, ST=Pest, L=Budapest, O=Laszlo Ersek Home Office, OU=IPv6 cert, CN=fd33:eb1b:9b36::2

Yeah, you're not actually testing the case I'm talking about. You want
a GEN_IP in the x509v3 Subject Alternative Name.

Compare with...

$ openssl s_client  -connect vpn-i-ha01.intel.com:443 2>/dev/null | openssl x509 -noout -text  | grep -A1 Alternative
            X509v3 Subject Alternative Name: 
                DNS:vpn-int.intel.com, DNS:scsidcint01-a.intel.com, IP Address:134.191.232.101

$ curl https://134.191.232.101/