hub: SSL certificate commonName() doesn't match peer
For example:
Certificate common name(10.1.100.xx) doesn't match peer.
In the hub->tunnels->certificate, ensure on the primary hub that the "check common name" box is NOT checked.