More likely a misconfigured custom domain than Vercel itself. Their default *.vercel.app deployments handle SSL automatically. But fair, plenty of half-finished launches out there either way.