Stale wildcard SSL certificate blocking standard renewal

Support
1

Hello Netlify Support,

Site name: kgspirits.netlify.app
Custom domains: kgspiritsllp.com and www.kgspiritsllp.com
DNS provider: Hostinger (external DNS)

The expired certificate still includes the stale wildcard *.kgspiritsllp.com. Every renewal retries DNS-01 validation for that wildcard and fails with:

Acme::Client::Error::RateLimited: too many failed authorizations (5) for "*.kgspiritsllp.com"

The earlier underlying error was NXDOMAIN for TXT _acme-challenge.kgspiritsllp.com.

Already verified:

  • The inactive Netlify DNS zone was removed.
  • Production domains include only the apex, www, and the Netlify subdomain.
  • Apex A record: 75.2.60.5.
  • www CNAME: kgspirits.netlify.app.
  • Authoritative nameservers: ns1.dns-parking.com and ns2.dns-parking.com.
  • No conflicting AAAA record exists.
  • The Netlify subdomain works; the custom domain has a certificate name mismatch.

I do not need a wildcard certificate. Please:

  1. Clear/delete the stale SNI certificate and pending CertAuthorizations/CertOrders for *.kgspiritsllp.com.
  2. Provision a new Netlify-managed Let’s Encrypt certificate covering only kgspiritsllp.com and www.kgspiritsllp.com.

I have stopped pressing Renew certificate to avoid further failed wildcard authorizations.

Thank you.