"failed to connect to all addresses" after setting up TLC connection between zeebe cient and broker

Hello

I’m trying to setup secure client communication based on Camunda docs, unfortunately getting: failed to “connect to all addresses … Failed to pick subchannel”.
Here are my steps:

  1. generated self-signed certificate based on: Secure cluster communication | Camunda Platform 8 Docs
  2. edited zeebe config which currently looks like this (running standalone broker):
    zeebe:
    broker:
    gateway:
    enable: true
    network:
    port: 26500
    security:
    enabled: true
    certificateChainPath: c:\certs\chainNodeA.pem
    privateKeyPath: c:\certs\nodeA.key
  3. my zeebe client initialization code looks like this (C#):
    _client = ZeebeClient.Builder()
    .UseGatewayAddress(gatewayAddress)
    .UseTransportEncryption(@“c:\certs\chainNodeA.pem”)
    .Build();

Result: broker starts but client is not able to connect due to the error mentioned above.
Am I doing something wrong here?

Running camunda-cloud-zeebe-1.3.8 on Windows 11, using zb-client 1.21 (c#)
Thanks for any advice

Also, running the command: zbctl status --certPath C:\certs\chainNodeA.pem
returns:
Error: rpc error: code = Unavailable desc = connection error: desc = “transport: authentication handshake failed: x509: cannot validate certificate for 127.0.0.1 because it doesn’t contain any IP SANs”