A newly published server cannot be reached from the internet

A new customer portal runs on SRV1 at 192.168.20.10. It must be reachable from the internet at 203.0.113.5 on TCP 443. A colleague added a static NAT entry on edge router R1 and a permit line to the inbound ACL OUTSIDE-IN on Gi0/0/0. Two complaints: the customer cannot connect from the internet, and the colleague's own test from PC1 in the office to https://203.0.113.5 also fails. Staff reach the portal fine on its private address.