pan></p></li></ul></li><li><p><strong><span>Realm mismatch</span></strong></p><ul><li><p><span>If </span><code>realm</code><span> isn’t </span><code>example.com</code><span>, some clients refuse auth. Keep realm = your domain.</span></p></li></ul></li><li><p><strong><span>Wrong certs on TURN</span></strong></p><ul><li><p><span>Use certs for </span><strong><code>turn.example.com</code></strong><span>; for browsers to accept </span><code>turns:</code><span> the SNI must match.</span></p></li></ul></li><li><