SSL certificate renewal failing — external DNS (GoDaddy), Renew button missing, expires Sep 21

Support
1

My Let’s Encrypt certificate expires September 21 (8 days). The Renew certificate button has disappeared and only “Set custom certificate” is showing. I am getting this error:

SniCertificate::CertificateValidationError: Unable to verify challenge for *.albus-innovation.com: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.albus-innovation.com

I believe Netlify’s backend still has managed_dns set to true even though I use external GoDaddy DNS. Please remove the wildcard certificate requirement and reprovision using HTTP-01 validation, or manually trigger certificate renewal.

2

This is happening because there is an inactive Netlify DNS zone for the domain. That zone is causing Netlify to try to use it for the ACME challenge process and it fails because the zone is inactive.

If you delete the inactive Netlify DNS zone below, Netlify which switch from DNS-based verification to HTTP-based verification and the provisioning will succeed:

https://app.netlify.com/account/dns/albus-innovation.com

If that does not resolve the issue, please let us know.

3

Thanks Luke. Problem solved.

Jeff