: Let's Encrypt certificate will not provision — myrestfulsleep.com

Support
1

Hi,

Site name: admirable-basbousa-17a5be
Custom domain: myrestfulsleep.com (+ www)
Team: karengalan

Netlify has been unable to provision a Let’s Encrypt certificate for my custom domain for two days. The dashboard shows “We could not provision a Let’s Encrypt certificate for your custom domain” and clicking “Verify DNS configuration” does not clear it. The site serves correctly over HTTP but HTTPS presents the *.netlify.app wildcard, so every visitor gets a browser security warning.

I have tried three separate DNS configurations. The failure is identical in all three:

  1. External DNS at Cloudflare (original setup)
  2. External DNS at 123 Reg / GoDaddy, apex A → 75.2.60.5, www CNAME → admirable-basbousa-17a5be.netlify.app
  3. Netlify DNS (current) — nameservers dns1–4.p09.nsone.net

I also removed and re-added the custom domain, which did not help.

Current state, verified from public resolvers:

  • NS dns1–4.p09.nsone.net (Netlify DNS active)
  • apex/www A 35.157.26.135, 63.176.8.218
  • HTTP 200 OK, serving the correct site
  • ACME /.well-known/acme-challenge/ reachable — 404 on a random token, i.e. path not blocked
  • CAA none present — no CA restriction
  • DNSSEC no DS records; no SERVFAIL on 1.1.1.1 / 8.8.8.8 / 9.9.9.9

Let’s Encrypt has issued for this domain many times historically (visible in crt.sh), so nothing about the domain itself blocks issuance.

Since DNS is now entirely under Netlify’s control and every precondition is satisfied, I believe the certificate order is stuck on the project record rather than misconfigured on my side. Could you please force a fresh certificate provision for this site?

Thank you,
Karen Galan