Generation 2 applications on custom domains will re-prompt for certificate creation once after upgrading to this release.