Comment by m-s

Apple uses certificate pinning for some of its domains, which doesn't play nicely with corporate firewalls.

https://support.apple.com/en-us/HT210060