Seems like your app is configured to use different connection URL that one configured in certificate? Could give us some more data:
internal URL of your HA
how your HA instance (sub)doman was configured in certificate request (please redact your real domain name!). Is it using Synology service or Letsencrypt?
URL you use to connect to HA from outside your network using browser
your Companion App configuration for connection to HA
Also, do you use Nabu Cloud?
Did you assign correct certificate for your domain ha.xxx.synology.me? You must create and assign correct one, not standard one as it’s used for synology general access. You hide most important things on last and second to last picture. What is here:
Awesome, it was (subdomain) certificate not created… thank you for your support,…
Last thing it is working fine from External link, but once connect to wifi it gives me : 403: Forbidden
Sloved: 403: Forbidden
I cleared ip_bans.yaml… thank you so much