Probably this:
$ certbot certonly --manual --preferred-challenges http -d investor-test.qiwi.com --dry-run
Error creating new authz :: Policy forbids issuing for name
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Obtaining a new certificate
An unexpected error occurred:
Error creating new authz :: Policy forbids issuing for name
Looking at Boulder, it looks like (qiwi.com and *.qiwi.com) have been explicitly blacklisted.
Speculation: it may be due to the fact it is a financial institution, see this post: