Without knowing everything about your setup, at a guess, I'd say that it was because the server certificate you're using matches correctly on your internal address, but not on your external address.
_________________________
Bitt Faulk