Can’t obtain certificate for *.tk domain

It sounds like it inadvertently contained one Common Name field with the invalid name "sevenbits.tk www.sevenbits.tk".

You should put one of the names in the Common Name, and then both names, individually, in the Subject Alternative Names list. (Leaving the Common Name out may also work, I don't remember.)

Unfortunately openssl makes this a hassle. You can use a command along the lines of this post: