Let's Encrypt certificate won't provision for custom domain despite 12+ hrs of correct DNS

Netlify site name: jlrubyoutdoors (jlrubyoutdoors.netlify.app)

Custom domain: jlroutdoorsfl.com (also www.jlroutdoorsfl.com)

DNS provider: IONOS (external DNS, not Netlify DNS)

Current DNS records:

  • A @ → 75.2.60.5
    • CNAME www → jlrubyoutdoors.netlify.app
  • I moved this domain from Showit hosting to Netlify about 12 hours ago. In Domain management > HTTPS, clicking “Verify DNS configuration” succeeds every time, but clicking “Provision certificate” immediately after always fails with “We could not provision a Let’s Encrypt certificate for your custom domain.”

I’ve independently confirmed via Google’s public DNS (dns.google) that:

  • The A record for the apex domain resolves correctly to 75.2.60.5
    • The CNAME for www resolves correctly to jlrubyoutdoors.netlify.app
      • There is no CAA record restricting certificate authorities
        • There is no AAAA record
          • DNSSEC (DNSKEY) is not enabled
        • This has been consistent across many checks over 12+ hours. The site loads correctly over plain HTTP at the custom domain, confirming DNS routing to Netlify is working. Only the automatic Let’s Encrypt certificate issuance is stuck. I also see several other very similar reports posted in the last day (DNS verified but cert won’t provision), so this may be a broader platform issue right now rather than something specific to my domain.
      • Could someone take a look at what’s blocking ACME validation for this domain? Happy to provide any additional info needed. Thanks!