Hi all — my SSL certificate won’t cover my apex domain even though DNS is resolving correctly, and the dashboard “Renew certificate” button doesn’t resolve it. I believe this needs a force-reprovision from a staff member.
Site name: bright-hamster-9f77ae.netlify.app
Custom domains: www.jointlabsolutions.com (primary) and jointlabsolutions.com (apex, set to redirect to primary)
DNS: external DNS via Spaceship (keeping DNS there because Microsoft 365 email runs on this domain)
Error (Domain management > HTTPS):
Certificate renewal incomplete: missing domains jointlabsolutions.com
Troubleshooting already completed:
- Apex A record for jointlabsolutions.com → 75.2.60.5, confirmed resolving to that IP across all locations on dnschecker . org
- www CNAME → bright-hamster-9f77ae.netlify.app, confirmed resolving correctly worldwide on nschecker
- DNSSEC chain verified intact via DNSViz — no errors, so not a DNSSEC validation failure
- No CAA record on the domain that would block Let’s Encrypt issuance
- Have stopped clicking “Renew certificate” to avoid Let’s Encrypt rate limits
Could a staff member please force-reprovision the certificate to cover both jointlabsolutions.com and www.jointlabsolutions.com? Happy to provide anything else you need. Thanks!