What you can try is, before you add the new ipv6 address, is to add an additional

--tls-san

inside the service file