root cause is client check server's certification, but valid. Ubuntu bug, it should ignore the certification check.
A workaround is to remove the line
system-ca-cert=true
from the configuration file found in /etc/NetworkManager/system-connections/
