The vm1.mr.simpledemo.onap.org hostname that has been used to talk to DMaaP is not present in the certificate when using https.  mr.api.simpledemo.onap.org is in the certificate instead and is DNS-resolvable.   The change in configuration across policy components is to point to this hostname across all its components.