Awaiting External DNS error with cname and apex records

We’re using Clouldflare, and we just started getting the “Awaiting External DNS” error.

The CNAMEs for our www and our apex domain are present, but we’re still getting the error.

Site is: first15site.netlify.app, and our domain is first15.org.
Our full domain list for this Netlify site:
*.supportfirst15.com, first15.org, firstfifteen.org, supportfirst15.com, supportfirst15.org, www.first15.org

Additionally, our SSL/TLS won’t renew:
SniCertificate::CertificateNonvalidError: Unable to verify challenge for www.first15.org: During secondary validation: 2606:4700:3030::6815:5b49: Invalid response from http://www.first15.org/.well-known/acme-challenge/************************: 403

That clearly shows an invalid AAAA record that you should remove.

Thank you for looking into this! I don’t have any AAAA records in my DNS. Could this be coming from one of the A or CNAME records?

It is coming from Cloudflare. DNS is handled by Cloudflare.

Have you read this support guide?

I understand where the DNS is coming from. I don’t understand how there is an invalid AAAA that isn’t visible in my DNS records.

Thank you for the support article. I’ll read through it.