SSL cert won't renew - "www doesn't appear to be served by Netlify" but curl confirms server: Netlify

Support
,
1

Site: uparknyc.com (custom domain on Netlify project)

Issue:
The SSL/TLS certificate for www.uparknyc.com won’t renew. Netlify UI shows: “www.uparknyc.com doesn’t appear to be served by Netlify.”

Debugging already done:

  • curl -s -v http://www.uparknyc.com 2>&1 | grep -i server returns server: Netlify
  • dig www.uparknyc.com CNAME returns apex-loadbalancer.netlify.com - identical setup to www.uparknyc.org which works fine on a separate Netlify project
  • A record for uparknyc.com is 75.2.60.5 (correct Netlify IP)
  • No CAA records blocking Let’s Encrypt
  • www.uparknyc.com was previously a domain alias on a different Netlify project (.org). That has since been removed. Suspect stale internal routing state from that prior association is preventing cert renewal.
  • “Renew certificate” button does nothing.

Current cert: expires Sep 23, renewal is broken and needs a backend reset.