We have applied a workaround and confirmed it works. Certificates can be created for new custom domains again, everything is operating normally.
We are sorry about this, thanks for your patience