Hi Netlify team,
I’m having trouble provisioning a Let’s Encrypt SSL certificate for my custom domain photommygraph.fr (Netlify project: photommygraph).
Setup: Using Netlify DNS, with nameservers pointed to Netlify’s dns1-4.p01.nsone.net for about a month now. Primary domain photommygraph.fr and www.photommygraph.fr alias both show “Netlify DNS” in Domain management. DNS records are the auto-managed NETLIFY and NETLIFYv6 smart records, no manually added A/AAAA records.
Symptom: Every time I go to Domain management, HTTPS section, and click “Verify DNS configuration”, it succeeds with “DNS verification was successful”. But clicking “Provision certificate” right after fails immediately with “We could not provision a Let’s Encrypt certificate for your custom domain.” This has happened consistently across several attempts today.
Troubleshooting already done: Confirmed via public DNS lookups (Google and Cloudflare DoH) that the domain resolves correctly and nameservers are genuinely Netlify’s, the SOA record shows domains+netlify.netlify.com. No CAA records present that would block Let’s Encrypt. No DNSSEC enabled on the domain. Ran an independent check via Let’s Debug (letsdebug dot net) for http-01 validation, and the result was “All OK! No issues were found with photommygraph dot fr”.
Since external tools confirm the domain is fully valid for Let’s Encrypt issuance, but Netlify’s own provisioning keeps failing immediately, I suspect this might be a stuck state on your backend for this specific domain, possibly from repeated automatic retries over the past month. Could someone take a look and manually kick off certificate provisioning, or let me know if something else is needed on my end?
Thanks in advance!