The machine is known as azurewe1548.azureexternal.dnvgl.com within our network (we have a lump of MS Azure maintained as an internal resource).
apex-test.dnv.com is the 'Internet' name assigned to the server and the one that I'm trying to get the certificate for.
The server is sat behind a load balancer.