...
You'd need to add whole CA to Checkmk via Global Settings → Site Mangement → Trusted certificate authorities for SSLthe target host.
Solution 2
Register the agent with the receiver port (by default 8000, counting up similar to site apache 5000 → 5001 ...) like so:
...