Hi JohnS_3CX,
1) Phones can access the Internet.
2) No the PBX HTTPS port was NOT open. Silly mistake on my part. All working now.
3) The Let's Encrypt hotfix was done.
4) Manually pasting the URL into the phone's interface did not work, because I hadn't opened the console port to the Internet...