Nearly a year later, still unable to access the site. It’s relatively straightforward to obtain a new certificate. I can’t understand why it hasn’t happened except that the team has given up.
Mozilla error: MOZILLA_PKIX_ERROR _ADDITIONAL_POLICY_CONSTRAINT_FAILED