As @Grewishka wrote:
The missing Subject Alternate Name in the certificate is the root cause for the problem. checkmk 2.2 does not care, from checkmk 2.3 upwards the SAN has to be present, so you definitely have to check that before updating to 2.3 to not disconnect your agents during the update.
3 Likes