TLS renewal failing for *.damithah.com - Cloudflare DNS active but Netlify DNS zone still exists

Hi,

My Let’s Encrypt certificate renewal is failing with:

Unable to verify challenge for wildcard domain validation.

DNS is managed by Cloudflare and the site is working correctly over HTTPS.

The main website is hosted on Netlify and I also use a separate API subdomain through Cloudflare Tunnel.

Netlify still shows a DNS zone for this domain even though Cloudflare is the active DNS provider.

Could someone please check whether there is a stale or inactive Netlify DNS zone associated with this site that may be interfering with certificate renewal?

I do not require a wildcard certificate and only use the main website, www version, and a single API subdomain.

Site name: damithah.com

Thank you.