Hi, we've found a similar problem with the in-house apps downloads... and it was that the certificate had a wildcard, something like *.subdomain.domain.com, but it worked OK through a server with a certificate for server.subdomain.domain.com, that's how we solved it.