Partial certificate covers apex but not www

Hi all,

I have a partial-certificate issue.

Project: sage-cocada-507074
Team: willieshaw-nyc
Domains: luminstudionyc.com (apex, primary) and www.luminstudionyc.com (redirects to primary)

My Let’s Encrypt cert covers the apex only. Apex serves valid HTTPS, but www serves the default *.netlify.app cert (ERR_CERT_COMMON_NAME_INVALID), and the certificate’s Domains field lists only apex. The dashboard shows “doesn’t appear to be served by Netlify” and can’t auto-renew. Clicking Renew certificate has had no effect.

DNS is verified correct, apex A record points to 75.2.60.5, www CNAME points to sage-cocada-507074.netlify.app, no AAAA record, no CAA, and DNSSEC is not enabled. I’ve also already tried removing and re-adding the domain with no luck.

Since Renew doesn’t work, could a support engineer please manually repair/re-provision the certificate so it covers both luminstudionyc.com and www.luminstudionyc.com? Happy to provide any additional details. Thanks!