Deploy to a custom domain stuck on pending SSL

I bought a domain and followed the custom-domain guide. The A record and CNAME are correct (verified with dig), but the SSL certificate has been stuck on "pending" for 6 hours.…