This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store "Exchange 2013"

Issue : When users is connected from Internal network, Browser show certificate prompt, but connecting from External Network, No certificate error in the browser.

Resolution: Check the certificate in the Server which his browser is hitting, found Certificate is not installed. Import certificate from the Legacy server to the new server or the new server, resolved the issue.