the problem is that users connect to the server using ip, not the address.bcs site, signed by the previous administrator. I did not know to which address the certificate is issued. so we checked the certificate address
start> certmgr.msc found the certificate in detail in the bookmark, the found property of the object, in the attributes, CN shows the website address:

so I added the website address in dns and everything is getting fine. So users will need to connect to the website on "http: ///", not "http: //", ** (if the certificate is issued for contoso.com, but users access the site using ip this error will be shown)
source share