SSL certificate stuck on "DNS verification successful" for 48+ hours

Site: nationalforklifttraining.netlify.app

I have two custom domains: nationalforklifttraining.nz (external DNS, A record pointing to 75.2.60.5) and nft.co.nz (Netlify DNS via Crazy Domains nameservers).

DNS verification shows successful every time I click Retry, but no SSL certificate is ever issued. This has been ongoing for 48+ hours. Both domains show “not secure” in the browser with NET::ERR_CERT_COMMON_NAME_INVALID.

Please can someone manually trigger certificate provisioning for this site?