Refuse to establish TLS connection, ask some help , appreciate

[andylau004]

1. my tst adguardhome server: https://www.bxydoh.com.cn
2. my adguardhome crt:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

3. when i access https://www.bxydoh.com.cn/#logs
   my adGuardhome server print log ,like below

2024/04/01 15:40:45.028081 41270#3875 [debug] web: https: http: TLS handshake error from 218.241.161.59:53242: read tcp 172.17.153.177:443->218.241.161.59:53242: read: connection reset by peer

4. but use https://ip:port/#logs ,that is ok and show work log . but browse address bar have no green lock icon,, ,always red alert

5. my https 443 port , CipherSuites =

141:2024/04/01 14:10:11.651475 41270#4 [info] tls ciper suite: [TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256]

5. anyone have encountered this problem before, give some advise
   thks for your reply

[andylau004]

my pcap (when browse access url: https://www.bxydoh.com.cn/)
Uploading tls-handleshake.tar.gz…

[Cebeerre]

Duplicate of #6879