HTTPS and DDNS not working

[aGraphicz]

That’s good.

With this we’ve confirmed that your LE is setup correctly for https (your main ask in the thread title).

If you don’t need remote access, remove the forwards on the router or disable them for now.

Your easiest option to use https internally is to tell the browser to “trust” the site (your DSM web interface for now) when using the IP address. That doesn’t degrade the security. It’ll still be https traffic.

Well looks like I made a mistake early on by thinking you have forwarded the ports already. Guess that works now but am I do understand that you want https access only inside lan and not over the internet? If so you can just close the ports right now (apart from 80 for LE renewal), and listen to @WST16 advice regarding dns or ignoring https warnings.

UPDATE: @WST16 we will have to coordinate these responses

FYI seems to be normal that the certificate is issued by R3, according to Let's Encrypt:

Chain of Trust - Let's Encrypt

Root Certificates Our roots are kept safely offline. We issue end-entity certificates to subscribers from the intermediates in the next section. For additional compatibility as we submit our new Root X2 to various root programs, we have also cross-signed it from Root X1. Active ISRG Root X1...

letsencrypt.org

"Under normal circumstances, certificates issued by Let’s Encrypt will come from “R3”, an RSA intermediate. We have also issued a new ECDSA intermediate (“E1”), which we will begin issuing from soon."

 

[Dexxer]

When you try to connect to a DDNS address on a computer connected to the same router as your NAS you'll get an error.

Try with a computer from your friends home, usually you'll see it works no problem.

For some reason certificate on your own network can cause issues. At home I'm having the same problem. But when I try to connect elsewhere it works. Even on my phone using LTE instead of home's wifi, it works.

 

[WST16]

For some reason certificate on your own network can cause issues.

This is the reason:
HTTPS and DDNS not working

 

[Rusty]

When you try to connect to a DDNS address on a computer connected to the same router as your NAS you'll get an error.

Classic NAT loopback missing support. This is not a golden rule if your router supports it.