Kevin I can see that your current value for the CNAME WWW on your domain marriageworks.co is still pointing to an old cloudfront instance, this will prevent your SSL activation.

Please just change the CNAME for WWW to point to custom-domain.appdrag.com for now, then once you will be at the final step (step 4) you will get the new cloudfront address to configure for your CNAME (https://support.appdrag.com/blog/83-Configure-SSL-on-an-external-domain-name.html?category=6)