Error when renewing the certificate

[Ruben]

Context:
Netlify instance: https://vbrb-0001.netlify.com/
Custom domain: https://planb.vanbreda.be

Problem
There is a problem renewing the certificate for our custom domain https://planb.vanbreda.be. It worked in the past, but now suddenly we receive the following error:

Error when renewing the certificate:
SniCertificate::CertificateInvalidError: Unable to verify challenge for planb.vanbreda.be

I’ve checked the following topics and docs:

• Error when trying to renew certificate error - SniCertificate::CertificateInvalidError - #5 by SandroSeiya
• https://answers.netlify.com/t/snicertificate-unable-to-verify-challenge-for-our-domain/1883/12
• Configure external DNS for a custom domain | Netlify Docs
  => There are no AAAA nor CAA records configured

What am I missing?

Kind regards,

[luke]

Hi, @Ruben, and welcome to the Netlify community site.

I do see a CAA record for this domain when I test:

$ dig vanbreda.be CAA +noall +answer

; <<>> DiG 9.10.6 <<>> vanbreda.be CAA +noall +answer
;; global options: +cmd
vanbreda.be.		21599	IN	CAA	0 issue "globalsign.com"
vanbreda.be.		21599	IN	CAA	0 iodef "mailto:dnsadmin@inf.vanbreda.be"

This can also be confirmed here (at this time):

https://toolbox.googleapps.com/apps/dig/#CAA/vanbreda.be

Please add “letsencrypt.org” to the list there to allow the automatic Let’s Encrypt certificates to be provisioned for that site.

If there are other questions about this we are happy to answer.