[root@i-3pedyvud ~]# gnutls-cli --disable-sni -p 8999 cde.gkmang.cn
Processed 147 CA certificate(s).
Resolving 'cde.gkmang.cn'...
Connecting to '36.41.188.74:8999'...
- Certificate type: X.509
- Got a certificate list of 2 certificates.
- Certificate[0] info:
 - subject `CN=abc.gkmang.cn', issuer `C=US,O=DigiCert Inc,OU=www.digicert.com,CN=Encryption Everywhere DV TLS CA - G1', RSA key 2048 bits, signed using RSA-SHA256, activated `2021-11-11 00:00:00 UTC', expires `2022-11-11 23:59:59 UTC', SHA-1 fingerprint `8ed8699a2a23f2fad72ccdc8ac92dda1383c2eb4'
    Public Key ID:
        e8f0164271a32af560fa68a8cf55fae687e93e9b
    Public key's random art:
        +--[ RSA 2048]----+
        |    . o          |
        |     + .         |
        |  + o            |
        | + =   .         |
        |o . + + S        |
        |.+   B .         |
        |o.. o +o         |
        |o. . o=..        |
        |..o  =E+         |
        +-----------------+

- Certificate[1] info:
 - subject `C=US,O=DigiCert Inc,OU=www.digicert.com,CN=Encryption Everywhere DV TLS CA - G1', issuer `C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert Global Root CA', RSA key 2048 bits, signed using RSA-SHA256, activated `2017-11-27 12:46:10 UTC', expires `2027-11-27 12:46:10 UTC', SHA-1 fingerprint `594f2dd10352c2360138ee35aa906f973aa30bd3'
- Status: The certificate is NOT trusted. The name in the certificate does not match the expected. 
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.
*** Handshake has failed
GnuTLS error: Error in the certificate.
[root@i-3pedyvud ~]#