If a workstation/device is able to get pass the login page, check the url and compare it against the security certificate. Also check if issue is happening in all web browsers. (I think Google Chrome tries to use QUIC (HTTPS on udp), so that could/may trip you up.)