Why issue certificate for max.ru forbidden by policy?

That domain name is related to: OBShchESTVO S OGRANIChENNOY OTVETSTVENNOSTU KOMMUNIKACIONNAYa PLATFORMA

Which appears in the US Sanctions list: Sanctions List Search

Let's Encrypt is under US jurisdiction so cannot issue domains for sanctioned entities. You might try a different Certificate Authority subject to different rules which allows issuing a cert