TLS/SSL failed with 'test.mosquitto.org'

Hi guys, need help!


I am trying to connect to public broker 'test.mosquitto.org' using certificates. My reference is the document "MQTT Client for SIMATIC S7-1500 and S7-1200".

I have done following steps in the systematic manner:
1. first i downloaded the 'mosquitto.org.crt' from the mosquitto website.
2. I have enabled global security settings in PLC properties.
3. I have protected the project and imported the above downloaded certificate in the certificate manager's "Trusted certificates and core certification authorities".

4. Later i have imported the above certificate in the CPU properties > certificate manager > Certificates of the partner devices

5. Finally, i have made the changes in the "mqttDb" block where:

• I changed "enableTls" = True
• validateServerIdentity = True
• brokerCert = 3
• port = 8883
  

Please note that, I have already successfully tested with ‘test.mosquitto.org’ with port-1883. Meaning I already took care of some below points:

1. On the QDN address, use 'test.mosquitto.org.' [make sure it ends with period '.']
2. In the PLC properties > Advanced configuration > DNS configuration:  Provide the router IP-address and GOOGLE DNS-address
3. In the MqttDb > connparams > hwid: Use 0 instead of 64

Result:
when i change "MqttDb.connect = TRUE', I am got error status as #7002 later which changes to #8601 [with subfunction status as 0000_80E2]


I am attaching the detail steps with screenshot. Have a look

Regards,
Shubham [India]