Let's Encrypt certificate won't provision for custom domain despite fully correct DNS

Support
1

Hi Netlify team,

My custom domain is not getting an SSL certificate, causing visitors to see “Your connection is not private” in Chrome.

  • Netlify site name: tidimarketing (tidimarketing.netlify.app)
    • Custom domain: tidimarketing.com (primary domain), www.tidimarketing.com (alias, redirects to primary)
      • DNS: External DNS, A record for the apex domain points to 75.2.60.5
        • Error shown in Domain management > HTTPS: “We could not provision a Let’s Encrypt certificate for your custom domain.”
      • Troubleshooting already done:
        • Ran “Verify DNS configuration” in the dashboard - it succeeded (“DNS verification was successful”)
          • Clicked “Provision certificate” afterward - it failed again with the same error
            • Checked DNS propagation globally (dnschecker.org): A record resolves consistently to 75.2.60.5 worldwide, 100% propagated
              • Checked for a CAA record - none exists
                • Checked for AAAA (IPv6) records - none exist
                  • Checked for DS/DNSSEC records - none exist
                • Since DNS looks fully correct on my end, could you please check on your side why the Let’s Encrypt certificate issuance keeps failing (e.g. possible rate limiting) and help get it provisioned? Thank you!