Resolved
all certificates are up-to-date.
Monitoring
A mitigation has been applied - we see recovery and all previews are serving up-to-date certificates again.
Investigating
Previews are being created successfully but in some compute shards an outdated certificate is served.
We're investigating the issue.