Problems with let's encrypt certificate

Custom domain: lastfridaynight.nl

Netlify site: lastfridaynightnl.netlify.app

External DMS provider: Xel

DNS verification succeeds in Netlify.

A record for apex points to 75.2.60.5.www CNAME points to lastfridaynight.netlify.app.

Global DNS checks are correct.

No blocking CAA record.

Let’s Debug HTTP-01 reports “All OK”.

Certificate provisoning still returns: “We could not provision a Let’s Encrypt certificate for your custom domain.”