Things look fine. I'd maybe wait a little longer, there may still be something provisioning in the background. If it still doesn't work, you could try changing the subdomain or I'm sure the Workers team can take a look tomorrow (or Erwin can whenever he's free)
But @survy, ping me in an hour or two if it isn't working.. and I'll pass it on internally. Walshy is correct that you have done everything you need to do. Only if it was on a custom domain could it have been a configuration issue on your side.
Haha you have more than me! The zone looks active and cert was issued/validated.
Zone is new (like 2 hours old) so I'm gonna guess just something hasn't provisioned right now. You can probably find someone around who can dig in better than us to if it isn't working shortly. I need sleep