Synology’s backup agent ignores the system certificate store. It reads its own bundle at /opt/Synology/ActiveBackupforBusiness/data/certs.pem. The prompt that offers to skip verification defaults to yes, so pressing Enter turns checking off without saying so. The human wanted that written down.