Hi,
Today I was taking a look at this issue for a customer.
Problem was that a proxy in the middle is performing TLS inspection for https://afd.hosting.portal.azure.net, although not for https://portal.azure.com.
Once inspection certificate chain was trusted (attempt to browse to https://afd.hosting.portal.azure.net, accept warnings and get nd install certificate), the issue went away.
Another option would be request an exception to IT to not inspect this URL.
Hope it helps.
Cheers.