SSL certificate fails to provision despite successful DNS verification and Let's Debug all OK

Site name: panchitasrestaurant.netlify.app

Custom domain: panchitarestaurant.com (+ www.panchitarestaurant.com)

DNS verification succeeds every time (“DNS verification was successful”), and Let’s Debug shows “All OK” for both the apex domain and www using http-01. However, clicking “Provision certificate” fails immediately with “We could not provision a Let’s Encrypt certificate for your custom domain.”

Already checked:

  • No AAAA records
  • Only one A record on the apex, pointing to Netlify
  • CNAME on www pointing to the correct netlify.app subdomain
  • No CAA restrictions, no DNSSEC
  • Let’s Debug: All OK on both domains

This has been going on for over 24 hours. Would appreciate help resetting the certificate provisioning state on your end.