SSL Error: ALERT_BAD_CERTIFICATE

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c2:ab:ca:52:92:6f:4f:74
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=California, L=San Francisco, O=Tonal
        Validity
            Not Before: Oct  2 17:12:00 2018 GMT
            Not After : Sep 24 17:12:00 2048 GMT
        Subject: C=US, ST=California, L=San Francisco, O=Tonal
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:17:c9:39:13:6c:14:11:f7:05:29:e8:74:
                    59:8b:52:d3:55:e3:44:43:3c:e8:f3:bb:1b:86:73:
                    9d:9b:fc:b4:44:3b:e9:69:a2:25:93:9e:37:d4:22:
                    50:bb:54:85:0b:3f:b4:c6:a0:df:89:cc:53:a6:4d:
                    14:41:07:36:4c:fc:0a:d0:45:52:f8:0a:d1:c8:1e:
                    d8:68:2e:41:19:96:54:dc:e2:7d:25:49:5e:45:42:
                    86:1e:f8:24:c8:e9:4c:7a:32:d5:c0:ea:59:ae:fe:
                    ae:fb:0e:0a:7f:0e:d8:5f:39:6b:80:de:86:bb:bc:
                    2f:a9:9f:6d:42:d7:8c:67:43:77:a4:ce:26:c2:98:
                    b0:9b:02:45:22:c6:bb:2c:6f:75:92:4c:78:4e:6f:
                    fb:0f:bf:a0:54:4d:de:59:88:e9:24:59:df:78:7b:
                    b1:59:8f:a7:1f:15:b9:b4:d6:5e:57:2d:d1:f2:91:
                    68:83:4d:10:6b:46:69:bc:cf:a5:15:bb:73:05:80:
                    5d:66:6c:00:9e:19:4b:a8:e4:bf:55:eb:ce:ee:23:
                    f1:e8:54:df:ba:3a:c6:d6:36:4c:c5:8f:ae:15:d4:
                    8a:7b:ba:9d:42:2d:42:82:5f:42:a0:66:cc:8c:79:
                    d0:a5:6e:3d:9f:74:f1:95:d8:99:67:d7:b7:99:0a:
                    aa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0A:43:2C:D3:55:A9:6B:05:B1:F2:EA:2D:A8:AF:7F:02:EE:0F:8D:8E
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
            X509v3 Subject Alternative Name: 
                DNS:updates.tonal.com, DNS:dev-updates.tonal.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0d:02:1e:c0:34:4a:0a:aa:d5:c8:e9:5d:28:86:bf:27:bf:fe:
        19:25:cd:51:9c:59:b5:85:93:23:7f:fa:b6:9a:9e:26:90:3f:
        de:0c:fe:f9:dc:00:87:21:76:97:f0:c8:a8:b9:75:b4:c6:68:
        b9:79:a8:8a:f0:66:f0:68:ac:06:62:2c:5c:0c:5f:b7:56:ac:
        d0:ec:81:82:5e:7a:55:bc:f4:a8:f3:6c:23:9e:9a:b1:99:b5:
        5d:9b:05:83:ed:f4:9f:7d:a7:78:d1:3d:e3:87:91:21:2c:c9:
        f0:43:9c:ff:04:28:e7:e2:c8:c9:46:c5:14:6f:56:35:ac:c7:
        61:3f:35:57:02:fb:69:64:21:52:83:0a:1c:dd:12:2f:2c:9e:
        8c:66:1e:ff:16:43:8d:ba:25:b5:24:f8:79:84:6a:47:c9:ac:
        b5:ac:a6:c7:3e:83:97:6e:e7:57:f5:38:92:bd:e7:37:40:3d:
        09:04:53:16:a9:f5:7a:35:a9:52:89:8b:76:97:74:ba:ef:4a:
        c8:3f:2c:c1:6f:66:01:59:32:0f:96:05:5f:f8:88:a1:6c:2f:
        04:08:da:79:d1:0e:8b:1d:ff:1c:b3:05:13:ad:c3:cc:49:cc:
        d3:5a:ca:0a:91:d1:d7:de:d2:49:c5:e0:e8:ae:d0:48:a3:de:
        bb:2b:b8:54