Cannot provision Let's Encrypt certificate — DNSSEC error persists despite clean DNS

I’m trying to provision an SSL certificate for my custom domain 45thparallelconsulting.co hosted on Netlify (site: 45thparallelconsulting.netlify.app).

What I’ve done:

  • Domain is registered with Squarespace; nameservers are pointing to Netlify DNS (dns1-4.p07.nsone.net)
  • Netlify DNS zone shows correct NETLIFY records for both the apex domain and www
  • DNSSEC was enabled at the registrar with a DS record (key tag 58262, RSA/SHA-256) — I have since deleted that DS record from Squarespace
  • Google Public DNS confirms no DS record exists for the domain
  • dnsviz.net confirms the domain resolves with no DNSSEC signing chain

Current behavior:

  • “Verify DNS configuration” now passes with a green checkmark
  • Clicking “Provision certificate” shows the confirmation popup, but then returns to the error page: “We could not provision a Let’s Encrypt certificate for your custom domain”
  • Earlier attempts showed the specific error: 45thparallelconsulting.co is not resolvable with a resolver that validates DNSSEC”

DNS appears clean from all external resolvers I’ve checked. It seems Netlify’s internal provisioning process may still be hitting a cached DNSSEC result or encountering a separate issue. Any help appreciated.