Removed * from /root/certs on netmaker machine, restarted netmaker and did pull from client specifying the network. Got new certs (atleast according to timestamps) but the mosquitto_pub command fails with the same error.

root@testmaskin:~# mosquitto_pub -t hello -m world -d -h nm.129-151-201-102.nip.io -p 8883 --cafile /etc/netclient/broker.nm.129-151-201-102.nip.io/root.pem --cert /etc/netclient/broker.nm.129-151-201-102.nip.io/client.pem --key /etc/netclient/client.key
Client mosq-szbc7XacaYejOpmFbc sending CONNECT
Error: host name verification failed.
OpenSSL Error[0]: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Error: A TLS error occurred.