SSL Error: ALERT_HANDSHAKE_FAILURE

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            eb:e0:98:8f:3f:ea:9e:2f:12:1a:97:05:22:f7:43:02
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo ECC Organization Validation Secure Server CA
        Validity
            Not Before: Sep  2 00:00:00 2024 GMT
            Not After : Sep  2 23:59:59 2025 GMT
        Subject: C=US, ST=Ohio, O=The Kroger Co., CN=api-sb-akamai.kroger.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:f5:85:ac:f7:fc:2c:2e:9d:06:fc:27:05:ef:3c:
                    0a:c3:77:c8:9c:80:0a:64:ab:17:04:9b:2c:ee:68:
                    63:84:9c:cc:9e:5a:64:ae:e2:f4:7e:45:20:1c:5d:
                    d2:a6:ee:1c:3c:92:cc:bb:e0:86:c7:cc:cc:bb:83:
                    23:9a:2b:ca:76
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                4D:4A:EF:C4:46:B3:12:AD:4F:4E:9A:B1:59:E2:51:AB:08:10:78:08
            X509v3 Subject Key Identifier: 
                30:9F:69:88:C4:DF:EF:EE:E1:AC:19:F3:0C:D1:09:F0:50:42:EF:32
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.4
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:api-sb-akamai.kroger.com, DNS:www.api-sb-akamai.kroger.com
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:
                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A
                    Timestamp : Sep  2 18:34:05.400 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F1:0C:1A:D7:78:7C:14:72:DF:2F:4C:
                                1E:8A:91:AA:43:70:38:33:AA:DE:F0:58:09:A4:2B:79:
                                CC:BA:4B:B7:12:02:20:0E:43:74:8C:D9:EA:A9:AA:FD:
                                13:5A:E9:10:CF:C7:B4:B1:43:D0:9E:EF:CA:4B:E1:63:
                                A3:4B:82:FB:1E:30:87
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Sep  2 18:34:05.308 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E2:43:E2:72:8E:3A:1B:BB:7A:44:87:
                                08:42:4D:C4:FA:B2:56:05:81:C0:AE:8B:70:63:E2:5C:
                                2F:6B:A5:8B:37:02:20:0E:13:2E:DB:AC:37:9D:3C:24:
                                E7:84:74:22:D9:2E:B6:5D:FB:EF:97:82:ED:C6:95:A8:
                                B3:81:8C:73:BF:EF:4A
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 12:F1:4E:34:BD:53:72:4C:84:06:19:C3:8F:3F:7A:13:
                                F8:E7:B5:62:87:88:9C:6D:30:05:84:EB:E5:86:26:3A
                    Timestamp : Sep  2 18:34:05.288 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C8:E7:7A:45:69:CC:98:49:4E:AF:F2:
                                B7:A9:DA:2C:6E:96:EE:06:29:3B:8E:C9:97:C2:AC:FD:
                                60:CB:5D:26:21:02:20:12:99:E6:FF:6C:A4:75:DA:67:
                                94:C2:C2:A8:AD:5A:1D:2F:34:20:3D:12:03:E2:25:B7:
                                6C:4D:E0:F1:8F:9A:A3
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:bd:71:77:e3:84:e4:e6:c4:60:1e:73:18:34:
        09:3e:cd:1e:7c:79:86:99:57:7f:70:bd:9d:b3:d9:89:1b:e2:
        6e:02:20:34:15:02:39:66:11:e4:81:53:64:2d:42:eb:6d:7e:
        65:28:cf:fd:41:d9:ac:fa:2f:5a:c6:b9:b6:0a:9b:e6:3d