Site: glittering-rugelach-e33e2a.netlify.app
Custom domain: elevorix.org
Our Let’s Encrypt certificate (covering *.elevorix.org and elevorix.org) expired and automatic renewal keeps failing with:
SniCertificate::CertificateValidationError: Unable to verify challenge for *.elevorix.org: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.elevorix.org - check that a DNS record exists for this domain
Our DNS is external, hosted on Cloudflare (not Netlify DNS). We’ve already:
- Added the documented delegation record: _acme-challenge.elevorix.org CNAME → _acme-challenge.elevorix.org.netlify-acme.com (DNS only, not proxied)
- Confirmed it resolves correctly worldwide via public DNS checkers
- Removed a stale/leftover Netlify-managed DNS zone for this domain that may have been conflicting
- Waited out the Let’s Encrypt rate-limit window from earlier failed attempts
Despite all of this, renewal still fails with the identical NXDOMAIN error.
We don’t use any subdomain wildcard on this site — elevorix.org and www.elevorix.org are the only domains that need coverage. Could you please remove the wildcard requirement and reissue a standard (non-wildcard) certificate for elevorix.org and www.elevorix.org? This avoids the DNS-01 challenge entirely (switches to HTTP-01) and should resolve it permanently.
Thanks for your help.