Please delete stale certificate still bundling a removed .org wildcard — rate-limited, cannot renew

Support
1

Site: thecentralityofsin (Netlify project)
Primary custom domain: thecentralityofsin dot com (www redirects to it)
DNS: Netlify DNS

My site is serving Netlify’s default netlify.app certificate instead of one for my domain, so visitors get a “certificate name mismatch” / “connection is not private” warning. An SSL Labs test confirms the served certificate covers only the netlify.app names, not my domain.

The problem: my SSL/TLS certificate section shows a stale Let’s Encrypt certificate (Created Jan 24, Expired Apr 24) whose Domains line still lists a .org wildcard, the .com, and the .org:

wildcard-dot-thecentralityofsin-dot-org, thecentralityofsin-dot-com, thecentralityofsin-dot-org

I have already removed the .org domain from my project. My Production domains list now contains ONLY:

  • the netlify.app subdomain
  • thecentralityofsin-dot-com (primary)
  • www version (redirects to primary)

There is no .org anywhere in my domain list. But the certificate record still bundles the .org wildcard, and every renewal attempt fails trying to validate that wildcard. The errors shown have been:

Acme::Client::Error::RateLimited: too many failed authorizations (5) for the .com wildcard

and previously:

SniCertificate::CertificateValidationError: Unable to verify challenge for the .com wildcard: DNS problem: NXDOMAIN looking up TXT for the acme-challenge record

Clicking “Renew certificate” just re-fails on the .org wildcard and re-triggers the Let’s Encrypt rate limit. The dashboard no longer shows a Renew button — only “Set custom certificate.”

Request: please delete this stale certificate at your end so a fresh standard Let’s Encrypt certificate can be provisioned for ONLY my .com and its www version. I do not need or want any wildcard or any .org coverage. Thank you.

2

Following up after two days, as this is blocking the site entirely — visitors currently get a “connection is not private” warning because the domain is still serving the default netlify.app certificate.
The blocker is the stale certificate (created Jan 24, expired Apr 24) that still bundles a .org wildcard I no longer have in my domain list. Every renewal attempt fails validating that dead wildcard, so it can’t self-heal.
Could a staff member please delete that stale certificate at your end, so a fresh standard Let’s Encrypt certificate can provision for just my .com and its www redirect? Happy to provide anything else you need. Thank you.