Looks like Synology devices are replacing valid certificates installed by users with their own revoked 'synology.com' one after each reboot.
If you have HSTS enabled, the only way to access the NAS is to disable checks which puts you at risk of MITM attacks.