SSL certificate provisioning stuck after successful DNS verification for medum.net

Support
1

Hello Netlify Support,

The custom domain medum.net serves the Netlify site correctly over HTTP, but HTTPS still presents Netlify’s fallback *.netlify.app certificate instead of a certificate for medum.net and www.medum.net.

Site

  • Netlify site: medum.netlify.app
  • Site ID: 8ed77baa-a613-41d7-bb12-fa04dc399c6e
  • Primary domain: medum.net
  • Automatic redirect: www.medum.net to the primary domain
  • External DNS is used

Current error

Netlify Domain management reports DNS verification was successful, but clicking Provision certificate immediately returns:

We could not provision a Let’s Encrypt certificate for your custom domain.

The Netlify API currently reports:

  • ssl: false
  • automatic_tls_provisioning: true
  • automatic_tls_provisioning_expired: true
  • showSiteTLSCertificate: null
  • managed_dns: true
  • dns_zone_id: null
  • quick_setup_in_progress: true

DNS and validation checks

  • medum.net A -> 75.2.60.5
  • www.medum.net CNAME -> medum.netlify.app
  • No AAAA record
  • No CAA restriction
  • http://medum.net returns 200 from Netlify
  • Public DNSSEC validation succeeds
  • Let’s Debug HTTP-01 passes for both hostnames:

Troubleshooting already completed

  1. Removed an extra explicit www.medum.net alias, leaving only Netlify’s automatic redirect.
  2. Removed and re-added the primary custom domain.
  3. Re-ran DNS verification successfully.
  4. Re-tried manual certificate provisioning.
  5. Confirmed public DNS and HTTP-01 validation from external services.

The same certificate provisioning error occurs immediately after all of the above. HTTPS currently returns CN=*.netlify.app, so this does not appear to be a DNS propagation issue.

Could you please check and reset or repair the automatic TLS provisioning state for this site?