ORA-17965
Host name(s): "{0}" does not match the CN: "{1}" or SAN(s): "{2}" of the server''s certificate
Cause
When the server's Distinguished Name is not configured in the URL through SSL_SERVER_CERT_DN or through the JDBC property "oracle.net.ssl_server_cert_dn", the driver will authenticate the server by matching the configured hostname with the server's certificate Common Name (CN) or Subject Alternative Names (SAN). This error is thrown when this authentication fails.
Action
Make sure that the listener and server's certificate can be used for hostname-based authentication by either configuring the proper certificates or configuring the server's DN explicitly through SSL_SERVER_CERT_DN or oracle.net.ssl_server_cert_dn.