[CERT] TLS connection from 192.168.7.4:2XXX came in with non-plex.direct SNI 'XXXXXX.synology.me'

Did you add your certificate to PMS ?

If yes, did you include the Cert, Key, and CA in the P12 ?

I have a FAQ about how to generate P12’s with openSSLv3