Turns out, I needed to refresh the certificate after adding the www. redirection in the DNS zone.
Problem solved