Policy forbids issuing for..Status 400

That error message suggests that you created a CSR (certificate request) which had testintuitships-umms.com www.testintuitships-umms.com as a single identifier, whereas you need to split up those identifiers as separate subjectAltNames.

How did you generate it? Try this URL: https://www.sslforfree.com/create?domains=testintuitships-umms.com+www.testintuitships-umms.com

If you chose the “I have my own CSR” option on the above link, it can be a tricky matter to generate a CSR for multiple domains properly. See this article that shows one way to do it, or:

#change "/etc/ssl/openssl.cnf" as needed:
#  Debian: /etc/ssl/openssl.cnf
#  RHEL and CentOS: /etc/pki/tls/openssl.cnf
#  Mac OSX: /System/Library/OpenSSL/openssl.cnf

openssl req -new -sha256 -key domain.key -subj "/" \
  -reqexts SAN -config <(cat /etc/ssl/openssl.cnf \
  <(printf "\n[SAN]\nsubjectAltName=DNS:testintuitships-umms.com,DNS:www.testintuitships-umms.com"))
4 Likes