Custom domain TLS handshake fails (connection reset) despite valid certificate shown in dashboard

The Domain management page shows decisivemaritime.com as the Primary domain with Netlify DNS correctly delegated (confirmed via NS lookup — dns1-4.p03.nsone.net), and the HTTPS section shows a valid Let’s Encrypt certificate covering decisivemaritime.com and *.decisivemaritime.com.

However, connecting directly to the edge IPs (18.208.88.157 and 98.84.224.111) on port 443 with SNI set to decisivemaritime.com results in the connection being forcibly closed during the TLS handshake (server never sends ServerHello). The same edge IPs work correctly for incredible-meerkat-dce5ad.netlify.app.

I removed and re-added the custom domain entry, which didn’t resolve it. There were previously duplicate domain alias entries for this domain on the same site, which I also removed before re-adding.

Could you check why the edge isn’t serving the certificate for this SNI / re-sync this domain’s TLS config across your edge fleet?