Hi Netlify Support,
My custom domain cannot provision a Let’s Encrypt SSL certificate, and I’d appreciate help clearing a stuck ACME authorization.
Netlify site: calm-puppy-6ecf28.netlify.app
Custom domain: maximumas.lt (primary) + www.maximumas.lt
DNS type: External DNS (registrar: Interneto vizija / iv.lt)
Apex A record: maximumas.lt to 75.2.60.5 (single record, verified)
www: CNAME to calm-puppy-6ecf28.netlify.app
Background: DNSSEC was enabled when the domain was created, then I disabled it and removed the DS record at the .lt registry several days ago. DNSSEC is now fully gone — verified with Verisign DNSSEC Analyzer (no DS/DNSKEY/RRSIG) and DNSViz (domain shows as Insecure).
Current status: “DNS verification was successful” in my dashboard, but the certificate stays on “We could not provision a Let’s Encrypt certificate”. Stuck for several days despite multiple “Verify DNS configuration” attempts.
Let’s Debug (http-01) shows “All OK” — no issues found. DNS has propagated globally (dnschecker.org — all locations return 75.2.60.5). No CAA records, no AAAA records.
I believe there is a stale/failed ACME authorization from when DNSSEC was still active. Could you please clear the pending authorization and re-provision the certificate for maximumas.lt and www.maximumas.lt? Thank you very much.