SSL certificate stuck on "Waiting on DNS propagation" for apex domain — DNS is correctly configured

Hi,

My site name is palmira-booking (palmira-booking.netlify.app), and my custom domain is palmira-booking.ru (apex/bare domain, no www).

The issue: The SSL/TLS certificate for palmira-booking.ru has been stuck on “Waiting on DNS propagation” for over 2 days. Clicking “Verify DNS configuration” doesn’t produce any visible error, but the certificate never actually provisions.

Background: The domain was briefly misconfigured (pointing to a different hosting provider) for about 2 days, which I understand may have caused the initial certificate attempts to fail. I’ve since corrected the DNS records and confirmed via DNSChecker.org that they’ve fully propagated globally.

Current DNS records (external DNS, registrar is Timeweb):

  • A record: palmira-booking.ru75.2.60.5
  • CNAME record: www.palmira-booking.rupalmira-booking.netlify.app

What I’ve already checked:

  • DNS propagation confirmed complete worldwide via DNSChecker.org (A record)
  • No CAA records present that could block Let’s Encrypt
  • Clicked “Verify DNS configuration” multiple times over several hours

Could you please check on your end why the certificate isn’t provisioning, and manually trigger/repair it if needed?

Thank you!