Error al tratar de descargar página del SAT:

curl -vvvv 'https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=0&option=credential&sid=0'
* Host cfdiau.sat.gob.mx:443 was resolved.
* IPv6: (none)
* IPv4: 200.33.84.45
*   Trying 200.33.84.45:443...
* Connected to cfdiau.sat.gob.mx (200.33.84.45) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/pki/tls/certs/ca-bundle.crt
*  CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (OUT), TLS alert, handshake failure (552):
* OpenSSL/3.2.2: error:0A00018A:SSL routines::dh key too small
* closing connection #0


Descarga con certificado de letsencrypt

curl -vvvv https://cloud.sotolitolabs.com
* Host cloud.sotolitolabs.com:443 was resolved.
* IPv6: (none)
* IPv4: 5.78.94.35
*   Trying 5.78.94.35:443...
* Connected to cloud.sotolitolabs.com (5.78.94.35) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: /etc/pki/tls/certs/ca-bundle.crt
*  CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / x25519 / RSASSA-PSS
* ALPN: server accepted h2