Site name: bejewelled-palmier-3e797d
Custom domain: riti.com.au (primary), www.riti.com.au (redirect)
Using Netlify DNS (zone added ~May 18, 2 months ago).
Issue: SSL/TLS certificate section shows “We could not provision a Let’s Encrypt certificate for your custom domain.” Clicking “Verify DNS configuration” succeeds every time (“DNS verification was successful”), but clicking “Provision certificate” immediately after fails again with the same error, instantly, no delay. Retried 3 times over the last hour with the same result each time.
Troubleshooting already done:
- Confirmed via Google DNS (dns.google) that riti.com.au NS records correctly point to dns1-4.p08.nsone.net, matching Netlify’s assigned nameservers.
-
- Checked the Netlify-managed DNS zone: only 2 records exist, both type NETLIFY (ALIAS) pointing to bejewelled-palmier-3e797d.netlify.app. No CAA record.
-
- Checked for DNSSEC: no DS record exists for riti.com.au at the parent zone.
-
- Site is live and serving correctly over plain HTTP (http://riti.com.au loads fine), confirming DNS resolution works end-to-end. Only HTTPS/certificate provisioning is broken.
- I’ve noticed several other very similar reports posted in the last few weeks (identical symptom: DNS verifies clean, provisioning fails instantly), e.g. “Let’s Encrypt certificate won’t provision for custom domain despite 12+ hrs of correct DNS”, “Kaashvilla.com: could not provision a Let’s Encrypt certificate”, and others tagged netlify-dns-https-ssl from Jun-Jul. This looks like it may be a broader platform issue rather than something specific to my domain.
- This is blocking a paid ad campaign launch (Pinterest/Meta require HTTPS destination URLs), so I’d appreciate a manual nudge to re-issue the certificate on the backend. Thanks!