Subject: Let’s Encrypt certificate stuck failing despite clean DNS, DNSSEC removed, Let’s Debug OK
Site name: viliamkoucink.netlify.app Custom domain: viliamkoucink.cz (apex + www.viliamkoucink.cz) DNS provider: External (Active24/Websupport, not using Netlify DNS)
I’ve been trying to provision a Let’s Encrypt certificate for several days and keep getting: “We could not provision a Let’s Encrypt certificate for your custom domain.”
Steps already taken:
- Confirmed only one A record on the apex domain, pointing to 75.2.60.5 (verified via Google, Cloudflare, Quad9 resolvers, and directly against my authoritative nameservers)
- Found and removed a leftover AAAA record (IPv6) that was pointing to my old hosting provider — confirmed via letsdebug.net that this was flagged as MultipleIPAddressDiscrepancy
- Discovered and removed a DNSSEC DS record at my registrar (Active24) that may have been blocking validation
- Confirmed no CAA records exist on the domain (checked via public resolvers and directly against authoritative nameservers)
- Re-ran letsdebug.net (http-01) after removing DNSSEC — result: “All OK! No issues were found”
- Removed and re-added the custom domain in Netlify, waited 2+ hours, still same error
- Have not been using Netlify DNS previously, so there shouldn’t be a stale DNS zone conflict
- Not using Cloudflare or any other proxy in front of the domain
At this point everything checks out clean from every external diagnostic tool available to me, but the certificate still won’t provision. This looks like it might be a stuck state on Netlify’s backend that requires a manual reset of the ACME authorization.
Could someone from the Netlify team take a look and manually retry/reset the certificate provisioning for viliamkoucink.cz?
Thank you!