# Let’s Encrypt certificate provisioning fails despite successful DNS verification

**URL:** <https://answers.netlify.com/t/let-s-encrypt-certificate-provisioning-fails-despite-successful-dns-verification/172454>\
**Category:** Support\
**Tags:** netlify-dns-https-ssl\
**Created:** [September 29, 2026, 9:57am UTC](https://answers.netlify.com/t/let-s-encrypt-certificate-provisioning-fails-despite-successful-dns-verification/172454 "2026-09-29T09:57:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rajae\_driss](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/rajae_driss/32/67688_2.png) [@rajae\_driss](https://answers.netlify.com/u/rajae_driss)\
**Post date:** [September 29, 2026, 9:57am UTC](https://answers.netlify.com/t/let-s-encrypt-certificate-provisioning-fails-despite-successful-dns-verification/172454/1 "2026-09-29T09:57:51Z")

</div>

**Site name:** `joseiritual.netlify.app`  
**Primary custom domain:** `joseiritual.fr`  
**Domain aliases:** `www.joseiritual.fr`, `joseiritual.com`, `www.joseiritual.com`  
**DNS provider:** OVH

Hi,

I’m unable to provision a Let’s Encrypt SSL certificate for my site.

In **Domain management → HTTPS** , Netlify successfully verifies the DNS and displays:

**“DNS verification was successful. We’re ready to provision a TLS certificate from Let’s Encrypt and install it on our CDN.”**

However, when I click **Provision certificate** , it fails with:

**“We could not provision a Let’s Encrypt certificate for your custom domain.”**

I have already verified the following:

- `joseiritual.fr` A record → `75.2.60.5`
- `www.joseiritual.fr` CNAME → `joseiritual.netlify.app`
- `joseiritual.com` A record → `75.2.60.5`
- `www.joseiritual.com` CNAME → `joseiritual.netlify.app`
- DNS propagation is complete globally for all four hostnames
- No conflicting AAAA records
- No restrictive CAA records
- DNSSEC for `joseiritual.fr` was checked with DNSViz and reports **Secure**
- Netlify’s own DNS verification succeeds

Despite this, certificate provisioning continues to fail and HTTPS currently produces a certificate/security warning.

I also noticed a recent forum report involving a `.fr` domain with a possible ACME validation/provisioning issue on Netlify’s side.

Could you please check the SSL/ACME provisioning state for `joseiritual.netlify.app` and determine why Let’s Encrypt provisioning is failing?

If there is stale certificate/ACME state associated with the site or domains, could you please reset it and re-trigger provisioning?

Thank you!