Let's Encrypt certificate fails to provision - DNS verified, domain reset didn't help

Site: mikemillerjax (site ID e8aa602c-19c1-4447-8a3e-da26d0d69892)

Custom domain: heroesmovewithmike.com (primary) plus www.heroesmovewithmike.com, both on Netlify DNS (dns1-dns4.p01.nsone.net).

DNS verification succeeds in the dashboard, and externally the apex and www both resolve to Netlify with the correct nameservers, no CAA records, and no DNSSEC (verified via Google DNS since Sept 20). But every Provision certificate attempt returns “We could not provision a Let’s Encrypt certificate” immediately. We also removed the custom domain from the project and re-added it, which didn’t change anything.

Could you take a look or manually trigger the certificate for this site? Thank you!