Before the UserCheck certificate was updated in SmartDashboard, the UserCheck certificate was presented to users via internal interface only (as configured), and the VPN certificate was presented to external VPN clients via external interface (as configured).
After the update, there was an incorrect handling of the code.