Thank you both, now after your hint, I see this also mentioned in the docs:
Then, you'll need to contact Marketo Support to complete the process.
NOTE: Domains are NOT automatically secured once they're configured in your instance - you MUST contact Support for any domain changes!
Looks like I overlooked this.
... View more