The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy

Unable to generate the certificate getting below error.

Your system is not supported by certbot-auto anymore.
certbot-auto and its Certbot installation will no longer receive updates.
You will not receive any bug fixes including those fixing server compatibility
or security problems.
Please visit https://certbot.eff.org/ to check for other alternatives.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
An unexpected error occurred:
The server will not issue certificates for the identifier :: Error creating new order :: Cannot issue for "sustainability.ext.hp.com": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy
Please see the logfiles in /var/log/letsencrypt for more details.

Please help to generate the certificate.

It is probably blocked because it is a high-value domain. Please see this post for instructions on getting it unblocked.

I'd be pretty surprised if hp don't have centralised cert issuance. i.e. you need to ask IT for a cert and it needs to get approval from someone.