# Title: SSL certificate stuck on Waiting on DNS propagation **URL:** \ **Category:** Support\ **Tags:** netlify-dns-https-ssl\ **Created:** [August 6, 2026, 12:43am UTC](https://answers.netlify.com/t/title-ssl-certificate-stuck-on-waiting-on-dns-propagation/166436 "2026-08-06T00:43:27Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![koyuchang](https://avatars.discourse-cdn.com/v4/letter/k/8dc957/32.png) [@koyuchang](https://answers.netlify.com/u/koyuchang)\ **Post date:** [August 6, 2026, 12:43am UTC](https://answers.netlify.com/t/title-ssl-certificate-stuck-on-waiting-on-dns-propagation/166436/1 "2026-08-06T00:43:27Z")
My site is: scintillating-raindrop-ecacb6.netlify.app My custom domain is: I am using Netlify DNS, not external DNS. The assigned Netlify nameservers are active: [dns1.p08.nsone.net](http://dns1.p08.nsone.net) [dns2.p08.nsone.net](http://dns2.p08.nsone.net) [dns3.p08.nsone.net](http://dns3.p08.nsone.net) [dns4.p08.nsone.net](http://dns4.p08.nsone.net) Both castinglab.app and [www.castinglab.app](http://www.castinglab.app) have NETLIFY records pointing to scintillating-raindrop-ecacb6.netlify.app. I have already confirmed: - DNS verification succeeds in the Netlify dashboard. - There are no AAAA (IPv6) records. - There are no restrictive CAA records. - DNSSEC is not enabled. - No Cloudflare proxy, external DNS provider, or custom certificate is in use. - The custom domain is correctly attached to this Netlify site. However, Domain management \> HTTPS remains stuck on “Waiting on DNS propagation.” The live site returns this browser error: net::ERR\_CERT\_COMMON\_NAME\_INVALID The certificate currently served is for \*.netlify.app, not castinglab.app, so the .app domain is inaccessible because HTTPS is required. Could a Netlify support engineer please manually reset or reprovision the SSL/Let’s Encrypt certificate for: - castinglab.app - [www.castinglab.app](http://www.castinglab.app) Thank you.