Domain verification succeeded, but SSL certificate

1

Screenshot 2025-02-25 at 08.58.11
Screenshot 2025-02-25 at 08.58.112414×466 37.6 KB

I have a domain I verified, works on the ‘subdomain’ certificate I added. Also had all the DNS records required to get added

If I check the certs;

flyctl certs check lifegoalsmonitor.nl -a slg-monitor                                                                                    1 ✘ 
The certificate for lifegoalsmonitor.nl has not been issued yet.

Hostname                  = lifegoalsmonitor.nl
DNS Provider              = detoekomst
Certificate Authority     = Let's Encrypt
Issued                    =
Added to App              = 23 hours ago
Source                    = fly

You are creating a certificate for lifegoalsmonitor.nl
We are using lets_encrypt for this certificate.

You can validate your ownership of lifegoalsmonitor.nl by:

1: Adding an AAAA record to your DNS service which reads:

    AAAA @ 2a09:8280:1::30:5ba1:0

but that record is already present;

 ~  dig aaaa lifegoalsmonitor.nl                                                                                                               ✔ 

; <<>> DiG 9.10.6 <<>> aaaa lifegoalsmonitor.nl
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64856
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;lifegoalsmonitor.nl.		IN	AAAA

;; ANSWER SECTION:
lifegoalsmonitor.nl.	429	IN	AAAA	2a09:8280:1::30:5ba1:0

;; Query time: 11 msec
;; SERVER: fdaa:0:3abb::3#53(fdaa:0:3abb::3)
;; WHEN: Tue Feb 25 08:57:58 CET 2025
;; MSG SIZE  rcvd: 76

Not sure what is going on here. Any suggestions?

3

Possibly related: How long should I expect to wait for the certificate for my domain name to be issued?

4

thanks, but that seems about a DNS config not entirely right, and I’m pretty sure my DNS config matches up. It just does not start issuing the certs

5

your domain has a CAA record that prevents LetsEncrypt from issuing a certificate:

~ $ dig caa lifegoalsmonitor.nl +short
0 issue "comodoca.com"