Ejabberd: s2s fails due to "unsupported certificate purpose"

Server
15

Use the client that works for you with that kind of authentication. If you can get Certbot to do it, then go with that. Otherwise, you may need to use a different client.