I have good news, problem solved.
I found the solution to the problem in an old community thread, blessed search engine
when i changed rules to 80>80, 443>443, 5000>5000, and 5001>5001, it pulled the paid domain cert just fine
It was to make the adjustments and work the first time, I am very happy and I leave here the solution for those who, as in my case, with everything apparently well configured, gave the domain error.
Thanks to everyone who helped me