The issue with expired keys is normal and common (see here and here).
From outside of your LAN, could you try
nmap -p 443 YOURPUBLICIP
Could your isp have started using CGNAT ?
For testing purpose, could you try moving your ynh from DMZ and setting up portforwarding instead?