Hi, I need help getting my Let’s Encrypt cert reissued without the wildcard.
Site: serene-naiad-cde3fe.netlify.app Custom domain: www.95risk.com (primary), 95risk.com (redirect)
Current cert covers: *.95risk.com, 95risk.com
Error:
SniCertificate::CertificateValidationError: Unable to verify challenge for *.95risk.com: No TXT record found at _acme-challenge.95risk.com
Root cause: My DNS is hosted at Bluehost, not Netlify (nameservers are ns1.bluehost.com / ns2.bluehost.com). Netlify can’t create the _acme-challenge TXT record needed for the wildcard DNS-01 challenge, so renewal keeps failing.
What I need: I don’t actually need the wildcard. Can you remove *.95risk.com from the certificate and reissue covering only 95risk.com and www.95risk.com? That’ll let renewal complete via HTTP-01 and renew automatically going forward.
I’ve already tried clicking “Renew certificate” in the dashboard, but it retries with the wildcard still in scope and fails the same way.
Thanks, Tony