can not activate www-ssl service

Hi, I cant figure out why, but the www-ssl service is in invalid state.
Its hAP ac^3 router. On other router (same model, just different ISP) there is no problem in activating www-ssl service.

 /ip service print
Flags: X - disabled, I - invalid 
 #   NAME                PORT ADDRESS                                                   CERTIFICATE              
 0   telnet                23
 1   ftp                   21
 2   www                   80
 3   ssh                   22
 4 I www-ssl              443                                                           ssl-web-managment        
 5   api                 8728
 6   winbox              8291
 7   api-ssl             8729                                                           none

Is there some way to see some logs, why the www-ssl is invalid?
If I change the port to other number than 443 then its ok. Is there a way to find if the 443 port is used by some other service?

Do you perhaps have a port forward on port 443?
Anything in the logging?

not - as far as I can tell, I see nothing in log … more or less simple setup

/ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; defconf: masquerade
      chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none 

 1    ;;; masq. vpn traffic
      chain=srcnat action=masquerade src-address=192.168.89.0/24

Have you tried rebooting?

after reboot, still the same…

However if I try to connect from chrome i get:

This site can’t provide a secure connection192.168.1.1 uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

ok solved - no idea why, but the sstp-server was enabled…

 /interface sstp-server server set enabled=no

solved the problem