I’ve gone ahead and setup two domains for my client on their Netlify deploy however it appears that both have SSL certs from Netlify and these are being served invalidly. Futher information on Chrome states
This server could not prove that it is **pvy.construction** ; its security certificate is from ***.netlify.com** .
This may be caused by a misconfiguration or an attacker intercepting your connection.
that 300 in the last quoted line is the TTL in seconds. I think cloudflare’s general default is 5 minutes for CNAME records, but hard to be sure how you had things configured before. Also thanks to the distributed nature of DNS, some servers can hang onto things for too long and it can be hard to troubleshoot but the link from the UI in case the certificate has trouble provisioning has good advice to nudge it along:
specifically step 4 can combat those recalcitrant servers.
If anyone comes to this thread via google like me then you might find it helpful to know that my issue was fixed in a similar but different way: by clicking renew certificate under domain management / https
(I didn’t appreciate that this was a required step in moving the domain name to netlify managed DNS - perhaps because this was the second address I moved to point to the same netlify.app and didn’t have to do it for the first one - ?)