Can't get certificate to provision

Support
1

I submitted this ticket and it was closed before anyone responded to it even though support said they were going to so I am resubmitting. thanks!

My site is trekfinder.app and www.trekfinder.app and the subdomain is: star-trek-nextgen-episode-finder.netlify.app.

I have tried Ask Netlify and taken the following steps to solve this issue and it still does not work. Can you help please?

  1. Domain: trekfinder.app, using external DNS (Cloudflare)
  2. A record on apex → 75.2.60.5 (confirmed, no duplicates)
  3. CNAME on www → star-trek-nextgen-episode-finder.netlify.app (confirmed correct)
  4. No CAA record
  5. No AAAA record issue
  6. DNSChecker: fully propagated, all green
  7. Let’s Debug: no issues found
  8. Certificate provisioning fails immediately on manual trigger and via 24+ hours of automatic retries

Thanks!

Mark