Site raddolo (site ID 951c6583-4bb2-4cfe-b4ff-1777bd4ad420), domain raddolo.com on Netlify DNS in the same team.
Let’s Encrypt provisioning is stuck. Today’s certificate covers only raddolo.com, not www.raddolo.com. Renew fails with “DNS verification failed — doesn’t appear to be served by Netlify,” alternating between blaming www and the apex — while both hostnames serve from Netlify’s edge and resolve to Netlify from all four assigned nameservers (dns1–4.p02.nsone.net), matching the .com registry delegation. No AAAA, no CAA, no DNSSEC, no extra records in the zone. Let’s Debug reports zero problems for both names (tests 3085719, 3085720). Already tried: multiple renews, primary-domain changes, full remove/re-add of both domains.
Please clear the cached DNS verification and reprovision the certificate to include both names.