Domain alias verified but certificate not renewing to include it

Support
1

Site: getcontinuity
Domain that won’t get a certificate: app .ambitiouspeace .com
Current primary domain: continuity .ambitiouspeace .com (working, valid cert)

(Apologies for the spaced-out domain names — the forum blocked my post for containing too many links as a new user.)

I added the app subdomain as a domain alias to my site today. DNS is external — the domain is registered at Namecheap and I manage records there, not with Netlify DNS.

What’s working:

  • The CNAME is in: app → getcontinuity .netlify .app. It resolves correctly from multiple locations.
  • Netlify accepted it — the “Pending DNS verification” warning cleared shortly after I added the record.
  • The alias appears normally in Domain management with no warning against it.

What isn’t:

  • The SSL/TLS certificate panel still lists only the continuity subdomain. The app subdomain is not on the certificate.
  • The certificate’s “Updated” timestamp has not changed since 1 September.
  • Loading the app subdomain over HTTPS returns a certificate name-mismatch error in the browser. Over plain HTTP the site serves correctly, so the routing is fine — it’s only the certificate.

What I’ve tried:

  • Clicked Renew certificate twice, roughly 4 hours and 3 hours ago. No visible change either time, and no error shown.
  • Waited well beyond the usual provisioning window.

Diagnostics already run:

  • Let’s Debug with HTTP-01 against the app subdomain: All OK — no issues found.
  • No CAA records exist on the domain. I checked the full host record list at the registrar.
  • Both aliases point at the same site with the same CNAME target. The certificate covers one and not the other, and the certificate’s updated timestamp hasn’t moved despite two renew attempts.
  • The continuity subdomain has held a valid Let’s Encrypt certificate since July, so the setup pattern is proven on this same site.

I’ve deliberately stopped clicking Renew to avoid tripping a Let’s Encrypt rate limit. Could someone check whether the certificate provisioning job for this site is stuck or being rejected on your side?

Thanks.