The server could not connect to the client to verify the domain

Sorry, that isn't allowed by industry rules from the certificate authority side.

(there are other threads on this topic on this forum, but that one is probably the most detailed)