OCI-17966
Neither host name(s): "{0}" nor service name: "{1}" matches the CN: "{2}" or SAN(s): "{3}" of the server''s certificate
Cause
When the server's Distinguished Name is not configured in the URL through SSL_SERVER_CERT_DN or through the JDBC property "oracle.net.ssl_server_cert_dn", and the JDBC property "oracle.net.ssl_allow_weak_dn_match" is set to "true", the driver will authenticate the server by matching the configured hostname or service name with the server's certificate Common Name (CN) or Subject Alternative Names (SAN). This error is thrown when this authentication fails.
Action
Make sure that the listener and server's certificate can be used for hostname-based or service-name-based authentication by either configuring the proper certificates or configuring the server's DN explicitly through SSL_SERVER_CERT_DN or oracle.net.ssl_server_cert_dn.