Hi team,
My Let’s Encrypt renewal has been failing for weeks and the certificate expired on Sep 12 at 12:14 UTC, so all my production sites on this domain are now behind browser security warnings.
Error shown in the dashboard:
SniCertificate::CertificateValidationError: Unable to verify challenge for *.infinitumcor.org: Incorrect TXT record “P1myPMIanB8OH1Bz_5vngcD5xrkIEhTf_q9UV_niBYY” (and 1 more) found at _acme-challenge.infinitumcor.org
Root cause: infinitumcor.org uses external DNS (Porkbun, delegated at the registry), but a wildcard certificate for *.infinitumcor.org was auto-provisioned back when an unused Netlify DNS zone also existed for this domain. I have since deleted that unused Netlify DNS zone, but the stale wildcard certificate is still attached to my sites, so DNS-01 renewal keeps failing and cannot succeed on external DNS.
I have already tried the “Renew certificate” button on each site (it fails with the same error), and the API returns “certificate parameter is required when updating an existing certificate” when I attempt to re-provision.
Request: please remove the stale wildcard certificate from these three sites and issue standard per-hostname certificates:
- infinitumcor.netlify.app (www.infinitumcor.org)
- the-loom-infinitumcor.netlify.app (loom.infinitumcor.org and refrain.infinitumcor.org)
- aletheia-infinitumcor.netlify.app (aletheia.infinitumcor.org)
All hostnames resolve correctly via Porkbun DNS, so HTTP-01 validation should succeed immediately.
Thank you!