Let's Encrypt certificate provisioning fails despite successful DNS verification

Hi Netlify Support,

I need help with SSL certificate provisioning for my custom domain.

Site:
la-canada-pet-grooming.netlify.app

Custom domains:

The domain uses external DNS at Pair Domains.

DNS configuration:

  • Apex A record → 75.2.60.5
  • www CNAME → la-canada-pet-grooming.netlify.app
  • No additional A or AAAA records
  • DNSSEC is off

Netlify’s “Verify DNS configuration” reports:
“DNS verification was successful.”

However, when I click “Provision certificate,” Let’s Encrypt provisioning fails with:
“bad dns for custom domain”

This has persisted for more than 24 hours.

I also tested both domains using Let’s Debug with HTTP-01:

Netlify’s support assistant indicated that this may be a stale/stuck SSL provisioning state on Netlify’s backend and recommended requesting a manual reset.

Could Netlify Support please check the certificate provisioning state for this site and manually reset/re-trigger it if necessary?

Thank you,
Peter