External laptops getting error 0x80244007 on new external facing WSUS server

Background info:

Internal sus server is working fine - gpo pointed to https://wsus.company.com (using split dns). Internal dns is pointing to this server. No issues with internal computers

External sus server is a replica of the internal - gpo same as above. External dns is pointing to this server.

Both servers are using a valid wildcard cert from a trusted publisher.

External sus server can see the external laptop under unassigned, but when I click check for updates on the laptop, it gives me 0x80244007. This is the same on multiple external laptops.

On the clients, I have deleted temp files, ran disk cleanup, renamed software distribution folder, ran reset windows update agent scripts, and deleted windows update registry keys that references the client id. I've even added the wildcard cert to trusted publisher and trusted root certification authorities.

On the external sus server, I have updated the web.config file for maxInstalledPrerequisites from 400 to 800. I am seeing the following errors:

2020-05-13 19:39:55.838 UTC Info w3wp.193 ThreadEntry ThreadPoolWorkQueue.Dispatch
2020-05-13 19:39:55.838 UTC Error w3wp.193 ClientImplementation.GetExtendedUpdateInfo System.ArgumentException: The database does not contain a URL for the file 02114F34057DCC43D60FCC59975D19E140F92AF0.
Parameter name: fileDigests
  at Microsoft.UpdateServices.Internal.DataAccess.ExecuteSpGetFileLocations(Byte[][] fileDigests)
  at Microsoft.UpdateServices.Internal.DataAccessCache.GetFileLocations(Byte[][] fileDigests, DataAccess da)
  at Microsoft.UpdateServices.Internal.ClientImplementation.GetExtendedUpdateInfo(Cookie cookie, Int32[] revisionIds, XmlUpdateFragmentType[] fragmentTypes, String[] locales)
  at Microsoft.UpdateServices.Internal.ClientImplementation.GetExtendedUpdateInfo(Cookie cookie, Int32[] revisionIds, XmlUpdateFragmentType[] fragmentTypes, String[] locales)
  at SyncInvokeGetExtendedUpdateInfo(Object , Object[] , Object[] )
  at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
  at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
  at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
  at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)
  at System.ServiceModel.Dispatcher.MessageRpc.Wrapper.Resume(Boolean& alreadyResumedNoLock)
  at System.ServiceModel.Dispatcher.ThreadBehavior.ResumeProcessing(IResumeMessageRpc resume)
  at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
  at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
  at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  at System.Threading.ThreadPoolWorkQueue.Dispatch()
2020-05-13 19:39:55.838 UTC Warning w3wp.193 SoapUtilities.CreateException ThrowException: actor = https://wsus.company.com:8531/ClientWebService/client.asmx, ID=a8cf90b1-5b1f-4f74-a26a-4e5791b9f47a, ErrorCode=InternalServerError, Message=, Client=5fabec5f-d27b-4e1f-b50a-40a3e6e6df1a