Checkmk agent TLS registration

I wish this type of “solution” would also come with “and HERE IS WHAT A FIXED in my network to make it work”.

Clearly, I have made the same error, yet there is no hint here as to where to start looking.