Wildcard SSL cert stuck (rate-limited) — please remove wildcard, re-issue standard cert, check for inactive DNS zone

Support
1

Hi, my site won’t serve HTTPS — the Let’s Encrypt certificate expired on Aug 18 and won’t auto-renew.

Netlify site name: incredible-squirrel-31e05f.netlify.app
Custom domain: nexbux.trade (using Netlify DNS)

Errors shown in Domain management → HTTPS:
“Acme::Client::Error::RateLimited: too many failed authorizations (5) for *.nexbux.trade”
Previously: “SniCertificate::CertificateValidationError: Unable to verify challenge for *.nexbux.trade: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.nexbux.trade”

My DNS zone has only 5 records (2 MX, 2 NETLIFY, 1 SPF TXT) — no _acme-challenge TXT is being created automatically. My certificate is set to wildcard (*.nexbux.trade), but I only need nexbux.trade and www.nexbux.trade.

Could you please:

  1. Remove the wildcard (*.nexbux.trade) requirement from my certificate config on the backend;
  2. Re-issue a standard Let’s Encrypt cert for nexbux.trade + www.nexbux.trade;
  3. Flush/reset the stuck provisioning state; and
  4. Check whether an inactive/duplicate Netlify DNS zone exists on my account that could be blocking validation.

I understand the Let’s Encrypt rate limit may need to expire first — please advise on timing. Thank you very much.