Marking as closed. This was a regression caused in an older version of ScrollHub where I unintentionally put the 404 route before SSL challenge routes, leading the 404 handler to match the requests before SSL handlers could.
Creating new subdomains runs into an issue with the ssl certificate system.
Make cert for: domain.com. Creating private keys
Error setting up SSL for domain.com: SSL certificate or key not found for do main.com. Attempting to make cert.
Make cert for: domain.com. Private keys created
Make cert for: domain.com. CSR created
Make cert for: domain.com. client created
Refreshing ACME directory, age: 1730807668
HTTP request: get https://acme-v02.api.letsencrypt.org/directory
RESP 200 get https://acme-v02.api.letsencrypt.org/directory
HTTP request: head https://acme-v02.api.letsencrypt.org/acme/new-nonce
RESP 200 head https://acme-v02.api.letsencrypt.org/acme/new-nonce
Using nonce: guak6r7L1m_4_kk3ppGKxkkg3ZA_9mjpE-d63lBzDcwJQdLqeps
HTTP request: post https://acme-v02.api.letsencrypt.org/acme/new-acct
Caught HTTP 429, retry attempt 1/5 to URL https://acme-v02.api.letsencrypt.org/acme/new-acct
Found retry-after response header with value: 178, waiting 178 seconds
RESP 400 post https://acme-v02.api.letsencrypt.org/acme/new-acct
Caught invalid nonce error, retrying (1/5) signed request to: https://acme-v02.api.letsencrypt.org/acme/new-acct
Using nonce: yiS4Q9uef-uhh6vIk2rAjMMjRKGJlUJcQzxIvrhScfLfAUZBW7o
HTTP request: post https://acme-v02.api.letsencrypt.org/acme/new-acct
RESP 201 post https://acme-v02.api.letsencrypt.org/acme/new-acct
Make cert for: domain.com. account created
HTTP request: head https://acme-v02.api.letsencrypt.org/acme/new-nonce
RESP 200 head https://acme-v02.api.letsencrypt.org/acme/new-nonce
Using nonce: yiS4Q9ueryKtv0eukGCfrTm1rmhJ_KreEWTPpasA1n3YBXXJTpw
HTTP request: post https://acme-v02.api.letsencrypt.org/acme/new-order
RESP 201 post https://acme-v02.api.letsencrypt.org/acme/new-order
Make cert for: domain.com. order created
HTTP request: head https://acme-v02.api.letsencrypt.org/acme/new-nonce
RESP 200 head https://acme-v02.api.letsencrypt.org/acme/new-nonce