Site: papaya-starburst-6575c4 (moodbar.ar)
My Let’s Encrypt certificate expired on Aug 12 and cannot renew. The error shown in Domain management, HTTPS section, is:
SniCertificate::CertificateValidationError: Unable to verify challenge for *.moodbar.ar: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.moodbar.ar - check that a DNS record exists for this domain
The certificate was originally issued as a wildcard (*.moodbar.ar, moodbar.ar) back when the domain used Netlify DNS. DNS is now external (Cloudflare), so the DNS-01 challenge can never succeed, and “Renew certificate” keeps requesting the wildcard again.
What I have already done. I deleted the stale Netlify DNS zone for moodbar.ar. The apex moodbar.ar is now a flattened CNAME to apex-loadbalancer.netlify.com and resolves to 75.2.60.5. www.moodbar.ar is a CNAME to papaya-starburst-6575c4.netlify.app. Both records are DNS-only with no proxy at the time of testing, and there are no AAAA records. I clicked “Renew certificate” several times and it still requests the wildcard and fails with the same NXDOMAIN.
Could you please remove the wildcard from the certificate and provision a standard Let’s Encrypt certificate via HTTP-01 for moodbar.ar, www.moodbar.ar and moodbar-eventos.com.ar?
One thing worth mentioning: the site was unreachable for visitors for two days, so I temporarily put those two hostnames behind a proxy to restore HTTPS. If that blocks the HTTP-01 challenge from reaching the origin, tell me and I will disable it right away.
Thanks!