Let's Encrypt fails: kdmc.me registry NS is p08 but zone still publishes p06

Support
1

Site: subtle-salmiakki-3cc7aa.netlify.app
Domain: kdmc.me (plus the www subdomain)

Problem: Let’s Encrypt will not provision.
Error: We could not provision a Let’s Encrypt certificate for your custom domain.

Registrar nameservers match the dashboard: p08 pool (dns1 through dns4).
But the DNS zone itself still authoritatively returns the old p06 pool (dns1 through dns4).

I queried a p08 nameserver for NS records and got p06 answers with the AA flag.

HTTP works (Server: Netlify).
HTTPS still serves the wildcard netlify.app certificate (SAN mismatch).

Please resync/repair the DNS zone so published NS match p08, then reissue the certificate.