Probably because the certificate doesn’t match the domain because you use a local IP. You can temporarily accept the certificate by going to https://ha-ip:8089/ws and click continue. But for a permanent solution you can port forward and use the correct domain in the card config, or do a DNS rewrite in your router to point your domain to HA.
Here is some more info: Card | SIP-HASS
Hi! Need help.
I am am able to make calls between HA users.
Now I am trying to call from doorbell Hikvision kv6113.
Can someone tell me which settings should I make?
You need to setup SIP in your hikvision, create an extension in Asterisk first, then use that extension on your doorbell and start planning your dialplan
I have created an extension for DB. It connects to Asterisk. What should I input into the dialplan to make calls?
what do you want it do? 
the dialpan is already programmed to call other extensions , so just dial another created extension
I want to make a call to HA sip card. Should I add doorbell to sip-card?
BTW is it possible to open sip card full screen when someone calls?
No, your hikvision is an extension, leys say nr 200
your lovelace card is also extension, like 100 if you use the auto add feature
you call from 200 to 100
Still smth wrong.
I have the db registered on HA add-on, but when I press bell button, I hear that the subsriber is busy, please call back later. Any thoughts what I am doing wrong?
its not possible to call the hikvision doorbell, there is no answer button
i see you entered sip 101 to call too , but i dont see 101 registered? who is 101 ?
It is vice versa - I call from hikvision to 101. 100 is main person and 101 is additional person for wall tablet.
It is registered as well.
not sure, seems ok, can you post asterisk log? can you try calling from a sofphone instead to 101 to see if that works? to rule out hikvision
Tried with softphone, same result. Registered, but nothing further.
Post your asterisk logs, do you see anything there when you call from the doorbell?
Btw, do you also have an indoor station?
Show also your config for 8001 , the pjsip stuff
Try disabling video also, start easy
No, I do not have indoor station.
There is nothing in the logs except for huge amount of bots, trying to log in.
maybe smth wrong in pjsip_custom?
[8002]
type = endpoint
context = default
direct_media_method=invite
dtmf_mode=info
callerid=“Sophtphone” <8002>
force_rport=no
aors= 8002
auth = auth8002
[8002]
type = aor
max_contacts = 1
[auth8002]
type=auth
auth_type=userpass
password=***
username=8002
if there is nothing in the log, thats not good, that seems the hikvision isnt dialing out using asterisk
well i had the same problem. It helped to repeat in pjsip_custom.conf as well as pjsip_default.conf. Here’s what it looks like
[sipjs-phone-auth](!)
type=auth
auth_type=userpass
password=
; Common AOR parameters (template)
[sipjs-phone-aor](!)
type=aor
max_contacts=6
remove_existing=yes
remove_unavailable=yes
qualify_frequency=0
; Common ENDPOINT parameters (template)
[sipjs-phone-endpoint](!)
type=endpoint
send_rpid=yes
send_pai=yes
device_state_busy_at=1
webrtc=yes
; Setting webrtc=yes is a shortcut for setting the following options:
; use_avpf=yes
; media_encryption=dtls
; dtls_auto_generate_cert=yes (if dtls_cert_file is not set)
; dtls_verify=fingerprint
; dtls_setup=actpass
; ice_support=yes
; media_use_received_transport=yes
; rtcp_mux=yes
from_domain=asterisk
rtp_symmetric=yes
force_rport=yes
rewrite_contact=yes
direct_media=no
context=default
disallow=all
allow=ulaw,alaw,speex,gsm,g726,g723,g722,opus
[8001](sipjs-phone-aor)
[8001](sipjs-phone-auth)
username=8001
[8001](sipjs-phone-endpoint)
aors=8001
auth=8001
callerid="dohua" <8001>
no id 
who is that 134.209.146.142 ? is that someone external? have you exposed 5060 to public internet ? thats not a good thing