I'm trying to understand what I have missed, and how to fix this.
The setup is a clean install of 9.10.2-u1 on a small LAN. There's no DNS or AD server locally (devices are identified by IP/Mac/NetBIOS name). I set up a CA and certificate for the GUI, and it's reliably accessible using https...