It sounds like hairpin NAT isn't quite working properly correctly for you. It tends to be a pain on residential modem/routers. Sometimes routers reserve ports like 443/80 for internal usage (like the web panel), and you need to change those settings before hairpin NAT will work on those ports.
At any rate, that will only affect people on your internet network and it's not an issue with your server configuration or certificate.