Does the certificate contain the IP of the host as SAN entry like IP:xxx.178.46.xxx? I guess there could be a problem regarding if the URL is called FQDN or via IP.
I assume the trailing : is just for the error message like “what i do: error message”.
To support my assumption, in your call via the check you submit the IP:
and via curl you are connecting against the URL: