Make sure your NAS is reachable from the public internet under the domain you want to get a certificate for on port 80. If you use port forwarding, forward port 80 of the internet side of the router ...