The TameMyCerts documentation states:
TameMyCerts currently does only support the following Subject Alternative Name types:
- dnsName
- rfc822Name
- uniformResourceIdentifier
- userPrincipalName
- ipAddress
However the Certiception policy file includes the field value "sAMAccountName", which is not included in the list above.