Custom domains added recently were failing to fully activate because their security certificates could not be issued. This has now been resolved, and affected domains should complete setup normally; if a domain still is not active, removing and re-adding it will retry the process.