Custom domain verified but Let's Encrypt certificate will not provision

Site: zippy-narwhal-97d566
Domain: verdurearborists.co.uk

DNS verification succeeds and shows “DNS verification was successful”.
But clicking “Provision certificate” fails with “We could not provision
a Let’s Encrypt certificate for your custom domain.”

I have checked everything in the SSL troubleshooting guide:

  • Single A record on the apex pointing to 75.2.60.5, confirmed with an
    external DNS lookup
  • CNAME on www pointing to zippy-narwhal-97d566.netlify.app
  • No AAAA records on the domain
  • No CAA records on the domain
  • DNSSEC is not enabled
  • DNS is hosted externally on GoDaddy nameservers, not Netlify DNS
  • Google Workspace MX records are present but untouched

The domain rows in Domain management show no pending warnings. Earlier
attempts showed “Access Denied” under the SSL section, which has since
cleared, but provisioning still fails.

Could someone check for a stuck state on the backend and force
provisioning? Happy to provide anything else needed.