Certificate for Exchange 2019

One question in addition to @JuergenAuer’s reply could be: what client systems are accessing your mail server using these internal names? Why are they doing this instead of using the public name?