Hi Netlify team,
Site: preeminent-valkyrie-ae22bf (custom domain: agentic-gateway.de, alias www.agentic-gateway.de)
We intentionally use external DNS (IONOS) instead of Netlify DNS, because MX/SPF/DKIM/DMARC records for our business mailbox live at IONOS and we don’t want to migrate mail DNS to Netlify.
Our A record (apex → 75.2.60.5) and CNAME (www → our netlify.app subdomain) are correctly configured and verified - the dashboard shows green checkmarks for both. However, the site’s existing Let’s Encrypt certificate covers the wildcard subdomain plus the apex domain, and automatic renewal now fails because the wildcard SAN requires a DNS-01 challenge (an _acme-challenge TXT record), which can’t be completed since DNS is external. Error 1:
AcmeClientErrorServerInternal - Problem getting authorization
and then, after retries, error 2:
`AcmeClientErrorRateLimited - too many failed authorizations (5) for the wildcard name in the last hour`
We tried: clicking “Renew certificate”, and removing + re-adding the custom domain to the project. Neither cleared the wildcard requirement.
We don’t need a wildcard - just the apex domain and www. Could you please drop the wildcard SAN from this site’s certificate config and issue a standard (non-wildcard) Let’s Encrypt certificate via HTTP-01, which should work fine with our current DNS setup?
Thanks a lot!