You’ll need to turn off the “orange cloud” (we do not support being proxy’d to). This post has more details:
Once you make that change, as mentioned in that article, wait 5 minutes and then hit the “verify DNS” button on the domain settings page and trigger a certificate generation on our side.