Hi @dr00bie
rocks isn't new, see
https://publicsuffix.org/list/public_suffix_list.dat
// rocks : 2013-11-14 Dog Beach, LLC
rocks
So if a TLD is listet on the Public Suffix List, you should be able to create a certificate.
Or use the IANA list:
https://www.iana.org/domains/root/db
spa is the newest TLD - .spa Domain Delegation Data
Or use online tools like https://letsdebug.net/ (from @_az) or https://check-your-website.server-daten.de/ (own tool), there are domain name checks included.
In some cases it's possible that a domain is listed (PSL or IANA), but Letsencrypt doesn't have the newest version. But that's rare.