The certificate of a reserved domain with a managed certificate policy can not be detached directly, instead the managed certificate policy itself should be detached.
If you're having trouble resolving this error, please reach out to support@ngrok.com.