I don't know about ZeroSSL. I have used an AWS hosted one (using Amplify). I could not get tesla to recognize my site either, until I changed the URL to include the prefix www. Based on Tesla’s example, I did not think that was required, but that solved the problem I think you are describing...