SSL certificate stuck on "Waiting on DNS propagation"

Hi, I need help getting an SSL certificate issued for our custom domain — this has been stuck for over a day now.

Site: smarthireweb
Domain: www.smarthire.cz (with smarthire.cz apex redirecting to it)

The certificate stays stuck on “Waiting on DNS propagation” / serving the default *.netlify.app certificate. “Verify DNS configuration” succeeds instantly every time I click it, but the Let’s Encrypt certificate never actually gets issued.

What I’ve already checked/tried:

  • Single clean A record (75.2.60.5) on the apex, single clean CNAME (smarthireweb.netlify.app) on www — no duplicates
  • Removed a leftover AAAA (IPv6) record on the apex that was pointing to my old hosting provider — no AAAA records remain now
  • No CAA records present
  • No proxy/Cloudflare in front of the domain
  • Removed and re-added the custom domain in Netlify — no change
  • Google’s own crawler (via Search Console URL Inspection) independently confirms it gets “Invalid SSL certificate” when trying to fetch the page, so this isn’t just a local/browser issue

Could someone please manually check and force re-provision the certificate on your end? Happy to provide any more info needed.