Custom domain SSL certificate stuck on "Waiting on DNS propagation"

Netlify site name: bongja-makchang.netlify.app
Site ID: 066a6634-5684-45d8-a69e-190e8571e310
Custom domain: jinjubongja.com

I added jinjubongja.com as the primary custom domain and switched my registrar’s nameservers to Netlify DNS (dns1-4.p03.nsone.net) several hours ago.

DNS status: Both the apex and www show a green checkmark “Netlify DNS” verified in the Domain management panel. Clicking “Verify DNS configuration” always returns “DNS verification was successful”. However, the SSL/TLS certificate section has been stuck on “Waiting on DNS propagation” for several hours and no Let’s Encrypt certificate has been issued.

I already checked common causes from other forum threads. No AAAA record exists for the domain (confirmed via dig/DNS-over-HTTPS). No CAA record restricting Let’s Encrypt. NS records at the registrar exactly match the ones Netlify assigned.

Error when connecting via HTTPS: NET::ERR_CERT_COMMON_NAME_INVALID - the certificate served doesn’t match the domain. Plain http works fine; only https fails.

Could someone check why certificate provisioning isn’t progressing, or manually trigger it? Thanks!