Error: x509: certificate is not valid for any names

I’m new to Istio and I am working on setting up mTLS with some rest and grpc services. When I have mTLS on and I try to access a grpc service securely I get the following exception.

Failed to dial target host "shipmentgrpcapi.testing.svc.cluster.local:5050": x509: certificate is not valid for any names, but wanted to match shipmentgrpcapi.testing.svc.cluster.local

I have the defaults setup and it’s using the default CA so the Issuer is cluster.local. My rest endpoint is working fine. Do I have something configured incorrectly?

It looks like this issue is not Istio but an issue in grpcurl the tool I was using to test the connection.