Cannot provision SSL certificate – DNS verification failed for damiano.im

Hi @damiandrake0,

Thanks for reaching out! Welcome to Netlify’s Support Forums.

Looking at the site, I see you have a Netlify DNS Zone setup.

However, you’re not using Netlify’s Name servers mentioned here.

dig damiano.im NS +trace | tail -n 6
;; Received 98 bytes from 193.62.157.66#53(ns4.ja.net) in 131 ms

damiano.im.		1800	IN	NS	dns1.registrar-servers.com.
damiano.im.		1800	IN	NS	dns2.registrar-servers.com.
;; Received 98 bytes from 2610:a1:1025::200#53(dns2.registrar-servers.com) in 40 ms

Currently the DNS Zone is inactive, and one of the issues with an inactive DNS Zone is that it can cause issues with the SSL certificate being provisioned.

We have a Support Guide on inactive DNS Zones, the issues they cause, how to detect one and how to fix it:

Additionally, I see you do have External DNS configured:

host damiano.im
damiano.im has address 75.2.60.5
damiano.im has address 99.83.229.126

host www.damiano.im
www.damiano.im is an alias for damianoim.netlify.app.
damianoim.netlify.app has address 100.28.201.155
damianoim.netlify.app has address 34.234.106.80
damianoim.netlify.app has IPv6 address 2600:1f18:16e:df00::65
damianoim.netlify.app has IPv6 address 2600:1f18:16e:df02::65

The easiest option to fix this issue would be to remove the Netlify DNS Zone here:

This will remove the Netlify DNS Zone which is one solution for fixing an inactive DNS Zone issue.

Let us know if you have any questions.