Hi, @dlecan, this is happening because you are using the branch subdomains feature and our system thinks you are using Netlify DNS.
You are not using Netlify DNS for this domain, however. This is an unsupported configuration and it will continue to not function correctly until this is changed.
In other words, this is what happens:
- Our systems says, “I need to renew the SSL certificate and this domain is using Netlify DNS.”
- In reality, your domain isn’t using Netlify DNS.
- Our systems attempt SSL renewal using a DNS based verification and the SSL renewal fails.
There are two solutions for this.
Solution #1: Activate Netlify DNS for this domain.
If you choose option one, please read common issue linked to below before making any changes:
[ Common Issue] How do I migrate a domain to Netlify Managed DNS with zero downtime?
After following the instructions there, change the names servers for this domain to be the ones listed in the Netlify DNS configuration page for this domain:
Solution #2: Delete the inactive Netlify DNS configuration.
This will keep happening unless you delete the DNS configuration. It can be deleted here.
Next, follow the branch subdomain with external DNS instructions found here:
[Common Issue] How to use Netlify’s branch deploy feature without Netlify DNS
Please let us know if there are any questions about this.