I know at least in our instance this hook would be firing alongside with a new domain registration and it appears modules come before the actual registration so by the time the hook is attempting to provision an SSL cert the domain is not yet resolving. Is there a good way to add in a wait period here? I think even 60-120 seconds might be enough for the domain to get registered and resolve. Alternatively it may make sense at least as a first measure for the plugin to make staggered regular attempts at provisioning a cert if it fails on first attempt.