SSL stuck – Cannot provision Let’s Encrypt certificate after expired & re-added domain

Support
1 
Hello Netlify team,  
  
I need help with SSL for my custom domain. Here are the details:  
  
- **Domain:** `24x7serviciosgenerales.cl`  
- **Registrar:** GoDaddy  
- **Nameservers:** Pointing to Netlify DNS

dns1.p03.nsone.net

dns2.p03.nsone.net

dns3.p03.nsone.net

dns4.p03.nsone.net

- **DNS zone at Netlify currently has:**

24x7serviciosgenerales.cl A 75.2.60.5
24x7serviciosgenerales.cl A 99.83.229.26
24x7serviciosgenerales.cl NETLIFY 24x7serviciosgenerales.netlify.app
www.24x7serviciosgenerales.cl NETLIFY 24x7serviciosgenerales.netlify.app


- Domain shows as **Primary domain** in Netlify.  
- `www` redirects automatically to primary.  
- When I try to provision/renew Let’s Encrypt certificate, I get this error:  

> *We could not provision a Let’s Encrypt certificate for your custom domain. To provision a certificate automatically, Netlify needs to go through a domain validation process… cannot be completed unless the DNS records for your custom domain are already pointing at our servers.*  

**Background:**  
The domain had expired before. I renewed it and re-added it on Netlify from scratch, but SSL is still stuck and will not provision.  

Could you please reset the old SSL records and help me provision a fresh Let’s Encrypt certificate for my domain?  

Thanks so much
2

Hi @fagust1992,

Thanks for reaching out and welcome to Netlify’s Support Forums!

I see looking at the Netlify DNS Zone here:

That two A Records were added that point to 75.2.60.5 and 99.83.229.26. Could you remove those records and let us know when you’ve done so? Those records aren’t needed and can cause issues with obtaining the SSL certificate. The only records that you need are the NETLIFY Records, you don’t want to remove those.