# Wildcard Let's Encrypt renewal failing with NXDOMAIN on Netlify DNS domain

**URL:** <https://answers.netlify.com/t/wildcard-lets-encrypt-renewal-failing-with-nxdomain-on-netlify-dns-domain/161504>\
**Category:** Support\
**Tags:** netlify-dns-https-ssl\
**Created:** [April 17, 2026, 3:18am UTC](https://answers.netlify.com/t/wildcard-lets-encrypt-renewal-failing-with-nxdomain-on-netlify-dns-domain/161504 "2026-04-17T03:18:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![HroGyrl414](https://avatars.discourse-cdn.com/v4/letter/h/3ab097/32.png) [@HroGyrl414](https://answers.netlify.com/u/HroGyrl414)\
**Post date:** [April 17, 2026, 3:18am UTC](https://answers.netlify.com/t/wildcard-lets-encrypt-renewal-failing-with-nxdomain-on-netlify-dns-domain/161504/1 "2026-04-17T03:18:49Z")

</div>

Title: Wildcard Let’s Encrypt renewal failing with NXDOMAIN on Netlify DNS domain

Site name: euphonious-profiterole-b4278b  
Custom domain: [inclus-ai.com](http://inclus-ai.com) (using Netlify DNS)

My Let’s Encrypt wildcard certificate expired today and the automatic renewal is failing with:

SniCertificate::CertificateValidationError: Unable to verify challenge for \*.inclus-ai.com: DNS problem: NXDOMAIN looking up TXT for \_acme-challenge.inclus-ai.com - check that a DNS record exists for this domain

Both [inclus-ai.com](http://inclus-ai.com) and [www.inclus-ai.com](http://www.inclus-ai.com) show as Netlify DNS with green checkmarks in Domain management, so the \_acme-challenge TXT record should be written automatically. There is no Renew certificate button available in the HTTPS panel, only Set custom certificate.

Could you please regenerate the ACME challenge TXT record and re-provision the wildcard certificate from your end? The www subdomain is currently returning ERR\_CERT\_COMMON\_NAME\_INVALID for all visitors, so the site is effectively down.

Thank you.

---

<div class="post-metadata">

**Author:** ![luke](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/luke/32/39_2.png) [@luke](https://answers.netlify.com/u/luke)\
**Post date:** [May 8, 2026, 5:13pm UTC](https://answers.netlify.com/t/wildcard-lets-encrypt-renewal-failing-with-nxdomain-on-netlify-dns-domain/161504/2 "2026-05-08T17:13:08Z")

</div>

Hi, @HroGyrl414. The domain `inclus-ai.com` is not using Netlify DNS. This is the reason that a wildcard SSL certificate cannot be provisioned.

That said, I do show successful SSL provisioning occurred on 2026-04-17, which is the day after this post was created. It looks like the SSL is working correctly now.

However, if it is not or if there are follow-up questions, please reply here anytime.