Custom domain SSL certificate keeps failing to provision

My custom domain gordiiash.it.com repeatedly fails to provision a Let’s Encrypt SSL certificate — error message: ‘We could not provision a Let’s Encrypt certificate for your custom domain.’ I’ve used ‘Verify DNS configuration’ multiple times with no change. DNS is pointed to Netlify’s nameservers (dns1-4.p02.nsone.net) and DNS propagation should be complete. Please help provision the certificate manually.