Let's Encrypt provisioning fails for topmat.sa despite successful DNS verification

Site: stellar-quokka-7f4c8a
Custom domains: topmat.sa (A record → 75.2.60.5) and www.topmat.sa (CNAME → stellar-quokka-7f4c8a.netlify.app)

In Domain management → HTTPS, “Verify DNS configuration” succeeds every time, but “Provision certificate” always comes back with “We could not provision a Let’s Encrypt certificate for your custom domain.”

I have verified externally that nothing on the domain side is blocking issuance:

  • Let’s Debug (letsdebug.net) reports “All OK” for BOTH topmat.sa and www.topmat.sa (http-01)
  • No CAA records anywhere in the chain, no stray AAAA on the apex, no DNSSEC DS
  • I waited over an hour between attempts to rule out rate limits

One possibly related detail: my team recently hit the Free plan credit limit (“running on operational credits” banner), around the same time provisioning started failing.

Could you check the certificate provisioning logs for this site and clear/retry whatever is stuck? Thank you!