Currently, we cannot issue new certificates for MagicDNS hostnames. This restriction affects manual certificate issuance and the deployment of new services through Tailscale Serve or Tailscale Funnel. Existing certificates and services currently exposed by Serve or Funnel will remain unaffected as long as the current certificates stay valid. We have identified the root cause and are actively working to resolve it.