This would be the expected behavious if the certificate is not trusted by the client.
Its very similar to any webserver having self-signed certificate.
To solve this import the root-certificate on the client or use a certificate in a chain already trusted by the client.
// Linjo