I am having issues with certificate renewal:
*SniCertificate::CertificateNonvalidError: Unable to verify challenge for .aitanalmagor.com: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.aitanalmagor.com - check that a DNS record exists for this domain
It appears aitanalmagor.com is configured using external DNS.
% dig aitanalmagor.com
aitanalmagor.com. 300 IN A 75.2.60.5
And
% dig www.aitanalmagor.com
www.aitanalmagor.com. 300 IN CNAME chimerical-bavarois-a9c7b9.netlify.app.
chimerical-bavarois-a9c7b9.netlify.app. 20 IN A 54.253.236.10
chimerical-bavarois-a9c7b9.netlify.app. 20 IN A 54.66.176.79
However it also appears the domain is configured to use Netlify DNS
% dig aitanalmagor.com NS
aitanalmagor.com. 172800 IN NS dns1.p01.nsone.net.
aitanalmagor.com. 172800 IN NS dns2.p01.nsone.net.
aitanalmagor.com. 172800 IN NS dns3.p01.nsone.net.
aitanalmagor.com. 172800 IN NS dns4.p01.nsone.net.
This is quite likely the cause. If you need/want to continue using external DNS, remove the domain from Netlify DNS. And vice versa.
Hi, @mayan.asif. The domain is not using Netlify DNS. This can be confirmed using the WHOIS data for the domain:
$ whois aitanalmagor.com | grep "Name Server:"
Name Server: NS-1314.AWSDNS-36.ORG
Name Server: NS-1929.AWSDNS-49.CO.UK
Name Server: NS-458.AWSDNS-57.COM
Name Server: NS-710.AWSDNS-24.NET
Name Server: NS-710.AWSDNS-24.NET
Name Server: NS-1929.AWSDNS-49.CO.UK
Name Server: NS-1314.AWSDNS-36.ORG
Name Server: NS-458.AWSDNS-57.COM
We have a support guide about how to correct this issue here:
If there are other questions about this issue, reply here anytime.