Project: celebrated-axolotl-f71f54
Custom domain: ultrashield.kz (on Netlify DNS)
Let’s Encrypt provisioning has been failing for over 48 hours. The UI shows “We could not provision a Let’s Encrypt certificate for your custom domain”, while “Verify DNS configuration” reports “DNS verification was successful”.
Background: for the first ~48 hours the domain had a broken delegation at the registrar — the .kz registry still listed stale nameservers (185.116.195.38, 185.121.81.104, 89.35.125.31) alongside the Netlify ones, and they returned REFUSED. That has since been fixed and verified.
Current state, verified via Google Public DNS:
- NS: dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net — status NOERROR
- A (ultrashield.kz): 18.208.88.157, 98.84.224.111
- A (www.ultrashield.kz): same
- CAA: none
- The site serves correctly over HTTP on the custom domain
I have already removed and re-added the domain to the project, waited, and did not spam the verify button. Still failing.
I suspect the certificate order is stuck behind a failed-validation rate limit accumulated during the broken-delegation period. Could you check the provisioning queue for this project and re-trigger it manually?