SSL certificate stuck on "doesn't appear to be served by Netlify" — external DNS, apex works, www on default cert

Support
1

Hi team,

My Let’s Encrypt certificate is stuck and won’t renew. Every time I click “Renew certificate” I get “unweightd.com doesn’t appear to be served by Netlify,” but the domain really is pointing at Netlify and the apex loads fine. I’m hoping someone can manually flush the SSL cache and reprovision the certificate.

Here’s everything I’ve verified:

  • Site: papaya-tulumba-99205c.netlify.app
  • Custom domains: unweightd.com (primary) and www.unweightd.com (set to redirect to the primary)
  • DNS is external — the domain is registered and managed at Squarespace, using Squarespace’s default nameservers.
  • Apex: a single A record, @ → 75.2.60.5,
  • www: CNAME → papaya-tulumba-99205c.netlify.app, also confirmed resolving.
  • https://unweightd.com loads correctly with a valid certificate.
  • https://www.unweightd.com fails with ERR_CERT_COMMON_NAME_INVALID — it’s being served the default *.netlify.app certificate, so the issued cert clearly doesn’t include the www hostname.
  • There is no Netlify DNS zone for this domain (I deleted it after moving back to external DNS).
  • I’ve flushed the Google Public DNS cache for the A, CNAME, and NS records.
  • I’ve clicked “Renew certificate” multiple times; it fails the same way every time.

Could you please manually flush the SSL cache and reprovision the certificate? Happy to provide anything else you need. Thanks so much!