Wildcard cert renewal failing, need reissue without wildcard

Support
1

Hi, I need help getting my Let’s Encrypt cert reissued without the wildcard.

Site: serene-naiad-cde3fe.netlify.app Custom domain: www.95risk.com (primary), 95risk.com (redirect)

Current cert covers: *.95risk.com, 95risk.com

Error:

SniCertificate::CertificateValidationError: Unable to verify challenge for *.95risk.com: No TXT record found at _acme-challenge.95risk.com

Root cause: My DNS is hosted at Bluehost, not Netlify (nameservers are ns1.bluehost.com / ns2.bluehost.com). Netlify can’t create the _acme-challenge TXT record needed for the wildcard DNS-01 challenge, so renewal keeps failing.

What I need: I don’t actually need the wildcard. Can you remove *.95risk.com from the certificate and reissue covering only 95risk.com and www.95risk.com? That’ll let renewal complete via HTTP-01 and renew automatically going forward.

I’ve already tried clicking “Renew certificate” in the dashboard, but it retries with the wildcard still in scope and fails the same way.

Thanks, Tony

2

Hi @tony1, thanks for getting in touch and apologies for the hassle and the delay here! It looks like this has since been resolved, but please don’t hesitate to reach back out if anything else comes up!