AWS SES tracking option for custom redirect domain getting blocked on HSTS enable

The issue you're facing is due to the HSTS policy being applied to your custom redirect domain. The HSTS policy requires a valid SSL certificate to be served for your domain, and the certificate's common name should match the domain.

To solve the problem:

1. Obtain a valid SSL certificate for your custom redirect domain.
2. Install the SSL certificate on the server hosting your custom redirect domain.
3. Ensure the server is configured to serve the SSL certificate for HTTPS requests.

By having a valid SSL certificate in place, the browser will no longer block your tracked links due to the HSTS policy, and the NET::ERR_CERT_COMMON_NAME_INVALID error will be resolved.