# Wildcard SSL certificate expired, renewal failing (incorrect TXT record) — please reissue without wildcard

**URL:** <https://answers.netlify.com/t/wildcard-ssl-certificate-expired-renewal-failing-incorrect-txt-record-please-reissue-without-wildcard/169927>\
**Category:** Support\
**Tags:** netlify-dns-https-ssl\
**Created:** [September 15, 2026, 11:28pm UTC](https://answers.netlify.com/t/wildcard-ssl-certificate-expired-renewal-failing-incorrect-txt-record-please-reissue-without-wildcard/169927 "2026-09-15T23:28:32Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jonathon\_Master](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/jonathon_master/32/67688_2.png) [@Jonathon\_Master](https://answers.netlify.com/u/Jonathon_Master)\
**Post date:** [September 15, 2026, 11:28pm UTC](https://answers.netlify.com/t/wildcard-ssl-certificate-expired-renewal-failing-incorrect-txt-record-please-reissue-without-wildcard/169927/1 "2026-09-15T23:28:32Z")

</div>

Hi Netlify Team,

SniCertificate::CertificateValidationError: Unable to verify challenge for \*.housemarkholdings.com: Incorrect TXT record “qbbCH0wTqQKJAPIs3ByZb7Yb0Kr\_xOxU\_BhFkIdhe3M” (and 1 more) found at \_acme-challenge.housemarkholdings.com

Site name: housemark1holdings  
Site ID: b9df2219-b2a7-4557-87d5-e518788883f0  
Custom domain: [housemarkholdings.com](http://housemarkholdings.com)

I don’t need wildcard subdomain coverage for this site — could you please reissue the certificate for just [housemarkholdings.com](http://housemarkholdings.com) and [www.housemarkholdings.com](http://www.housemarkholdings.com), without the wildcard? That should let it renew automatically going forward without depending on the DNS TXT challenge that’s currently failing.

Clicking “Renew certificate” in the dashboard has not resolved it.

Thanks for your help!