Certificate provisioning fails after DNS verification passes

Site name:aquamarine-zuccutto-c58b29.netlify.app
Custom domain: gatherkindred.com
DNS provider: Cloudflare (external DNS, not Netlify DNS)

I’m unable to get a Let’s Encrypt certificate provisioned for gatherkindred.com. DNS verification succeeds, and the HTTPS page then shows “We’re ready to provision a TLS certificate from Let’s Encrypt and install it on our CDN.” But clicking “Provision certificate” fails, and the page resets back to “We could not provision a Let’s Encrypt certificate for your custom domain.”

I’ve already ruled out everything in your troubleshooting guide:

  • Apex domain is a CNAME to apex-loadbalancer.netlify.com, set to DNS-only (not proxied) in Cloudflare
  • www is a CNAME to my Netlify site’s default subdomain, also DNS-only
  • No CAA record exists on the domain
  • No AAAA records exist on the domain
  • DNSSEC is disabled

Since DNS verification itself passes and the only failure is at the actual certificate provisioning step, this looks like it’s stuck on your backend for this specific domain rather than a DNS issue on my end. Could someone check the backend certificate state for this domain and/or manually reset it? Happy to provide any additional detail that would help.