Sorry for the confusion. What I meant was if you can create a dns entry for the srx. You can then submit a request for a certificate from a legitimate authority instead of using the self signed one.
I am assuming that the self signed certificate is why it is failling and if it had a legitimate authority certificate it would pass.