Wildcard certificate (*.aurvy.cl) renewal failing behind Cloudflare DNS

Support
,
1

Hello,

I’m having an SSL renewal issue with my Netlify project and would appreciate any guidance.

Domain

Current setup

The website is deployed on Netlify and works correctly.

The authoritative DNS provider is Cloudflare.

Current DNS records:

  • aurvy.cl → CNAME → aurvy.netlify.app
  • www.aurvy.cl → CNAME → aurvy.netlify.app

Error

Netlify is unable to renew the SSL certificate and shows:

SniCertificate::CertificateValidationError: Unable to verify challenge for *.aurvy.cl

Initially the error was:

DNS problem: NXDOMAIN looking up TXT for _acme-challenge.aurvy.cl

For troubleshooting purposes I created a TXT record named:

_acme-challenge.aurvy.cl

After that, the error changed to:

Incorrect TXT record found at _acme-challenge.aurvy.cl

This suggests that Netlify can now see the DNS zone correctly and is attempting ACME validation, but the wildcard certificate validation is failing.

Additional information

  • The site remains online and accessible.
  • Cloudflare is the authoritative DNS provider.
  • Netlify Domain Management currently shows:
  • The certificate currently includes:
    • *.aurvy.cl
    • aurvy.cl

Question

I do not need wildcard subdomains.

Would it be possible to remove the wildcard certificate (*.aurvy.cl) and issue a standard Let’s Encrypt certificate only for:

Or is there another recommended approach when Cloudflare manages DNS?

Thank you for your help.