Thank you Lubien.
Yep, old DNS records removed.
Any insight as to why it looks like an old cert that’s been deleted from the fly.io dashboard still seems like it’s being served? I read a few community posts where people reported something similar(ish): ERR_SSL_PROTOCOL_ERROR using wildcard certificate - #7 by jascha
Does the old cert need to be manually purged somehow?