I remember having a problem with firewalld on for a local install that took me to GKE or GCP as where the similar issue was added. Can't quite find what I remembered, but did you check the notes on https://cert-manager.io/docs/installation/compatibility/ ?