Accessing SSL sites inside walled garden

When I try to access an SSL site from inside a walled garden, I am hit with certificate errors. The errors tell me that the certificate applied to my hotspot service are being used for the foreign SSL site, and so the host name does not match the certificate. Even if I accept the bad cert, I never reach the remote SSL site. Is there something I am missing? My config is pretty straight forward I think..
/ip hotspot profile
add dns-name=thewallstreetjournal.towerstream.net hotspot-address=10.223.0.1 html-directory=lab
http-proxy=0.0.0.0:0 login-by=https,http-pap name=lab_prof nas-port-type=wireless-802.11
radius-accounting=yes radius-default-domain=“” radius-interim-update=received radius-location-id=“”
radius-location-name=“” radius-mac-format=XX-XX-XX-XX-XX-XX rate-limit=“” smtp-server=0.0.0.0
split-user-domain=no ssl-certificate=labsite.net use-radius=yes

/ip hotspot
add address-pool=lab_pool addresses-per-mac=2 disabled=no idle-timeout=5m interface=vlan823
keepalive-timeout=none name=LAB profile=lab_prof

/ip hotspot walled-garden
add action=allow disabled=no dst-host=www.mysite.com dst-port=“” server=LABI could get to http://www.mysite.com but not to https://www.mysite.com

You might want to try bypassing that by ip address and domain name. Does that work with SSL?

/ip hotspot walled-garden ip
add dst-address=xx.xx.xx.xx action=accept

I tried to add the IP instead of the host name (and even tried both at the same time), and I am still presented with bad certificates. It is still trying to use the certificate on the mikrotik which is associated to the hotspot profile rather than the certificate of the remote SSL site. However, if I accept the bad cert, I can now reach the remote site. Something is still very wrong here.