SSL certificate stuck requesting wildcard domain despite external (non-Netlify) DNS — repeated Let's Encrypt rate-limit failures since April

Support
,
1

Site name: stellular-elf-14cdfe
Custom domain: snowbrightelectric.com (+ www.snowbrightelectric.com)
DNS provider: GoDaddy (external DNS — nameservers are GoDaddy defaults, ns57/ns58.domaincontrol.com). DNS is NOT delegated to Netlify DNS.

Issue:
The SSL/TLS certificate for this site has been stuck since April 16, 2026. It is requesting a certificate for *.snowbrightelectric.com, snowbrightelectric.com (wildcard + apex), but a wildcard certificate requires DNS-01 validation, which is only possible if Netlify controls DNS — and it doesn’t; GoDaddy is authoritative. This mismatch appears to be the root cause of repeated failures:

Acme::Client::Error::RateLimited: too many failed authorizations (5) for "*.snowbrightelectric.com"

The certificate expired July 15, 2026 and has not successfully renewed since.

What I’ve already verified/tried:

  • GoDaddy DNS records are correctly configured: A record @ → 75.2.60.5, CNAME www → stellular-elf-14cdfe.netlify.app
  • No CAA, AAAA, or DNSSEC records present that would block validation
  • Ran Let’s Debug (letsdebug.net) against the plain domain using HTTP-01 — returned “All OK,” confirming HTTP-01 validation works fine for the non-wildcard case
  • “Automatic deploy subdomains” (the feature that would require a wildcard) is not enabled and is unavailable on this account, since it requires Netlify DNS
  • Removed and re-added the custom domain in the dashboard, hoping it would trigger a fresh (non-wildcard) certificate request — it did not. The certificate record’s Created/Updated timestamps stayed identical before and after
  • Also hit a separate throttle: “SSL Provisioning is temporarily disabled because too many recent CertOrder creation with the site” — this has since cleared, but clicking Renew certificate still returns the same wildcard rate-limit error

Request:
Since HTTP-01 validation for the apex/www domains is confirmed working, could Netlify support manually clear or reissue the certificate for just snowbrightelectric.com and www.snowbrightelectric.com (no wildcard)? Self-service actions in the dashboard don’t appear able to drop the wildcard requirement on their own.