SSL certificate not syncing to edge for custom domain gv-law.co.il

Support
, ,
1

Hi, my project “g-v” (g-v.netlify.app) has the custom domain gv-law.co.il

configured with Netlify DNS (zone is in the same team).

The dashboard shows an active Let’s Encrypt certificate covering

gv-law.co.il and *.gv-law.co.il, but the edge servers never serve it —

TLS handshakes with SNI gv-law.co.il are dropped (connection closed

before any certificate is presented), while g-v.netlify.app works fine

on the same edge IPs (63.176.8.218 / 35.157.26.135).

HTTP (port 80) for gv-law.co.il serves the site correctly, so the domain

mapping exists on the edge. I’ve tried: “Renew certificate” (multiple

times — the certificate’s Updated timestamp never changes), and removing

and re-adding the custom domain. Nothing helps.

Could you please re-provision / re-sync the certificate to the edge?

Thanks!

2

Update with API-level evidence:

  • GET /sites/{id}/ssl returns: state “issued”, domains
    [“*.gv-law.co.il”,“gv-law.co.il”], updated 2026-07-06T20:44:22Z,
    renewal_error_message: null.
  • POST /sites/{id}/ssl/renew returns 200 but is a no-op — updated_at
    never changes (tried repeatedly over 12+ hours).
  • Detached and re-attached the custom domain (via UI and via PUT
    /sites/{id}), added www.gv-law.co.il as an alias — no effect.
  • The edge IPs served by Netlify DNS for this domain (63.176.8.218 /
    35.157.26.135) still drop TLS handshakes for SNI gv-law.co.il (no
    certificate presented), while g-v.netlify.app works on the same IPs.
    Port 80 serves the correct site for the custom domain, so the host
    mapping exists.

The certificate exists in the control plane but was never distributed
to the edge, and renew refuses to re-issue because the cert is still
“valid”. Could someone force re-provisioning / re-sync?
Site ID: 00541595-0465-4074-89c9-f65a6a7ef79e. Thanks!