For the SMTP protocol, the complete certificate chain must be supplied.
If the certificate error is based on port 25.
You cannot see a certificate chain or the root CA in the overview.
When accessing via the browser, it obviously depends on whether you accessed the IP or external DNS in the browser. Alternatively, perhaps an internal DNS name that is not specified in the certificate.
Then a certificate error is also indicated.