While running univention-join the joinscript 92univention-management-console-web-server.inst fails during metadata download with:
curl: (51) SSL: no alternative certificate subject name matches target host name ‘ucs-sso.schein.me’
This can happen, if you have changed the ucs-sso login to an alternative name. Like it is described here:
If you have not set “
ucs/server/sso/fqdn” on each domain controller server, this can be the cause of the failure.
ucs/server/sso/fqdn to the alternative name for ucs-sso.
ucr set ucs/server/sso/fqdn='portal.schein.me'