Firebase Hack Going On?

We noticed that one of our authentication subdomains has an invalid cert error when trying to access it. We've noticed a malicious domain on these 2 certs here:

https://crt.sh/?id=18434517670 https://crt.sh/?id=18234404721