The wildcard certificate is stuck in the dashboard with status “Awaiting certificates”, even though the DNS challenge is publicly resolvable.
DNS challenge is present and resolvable, but the wildcard issuance request appears to be stuck or not completed on Fly’s side (possibly a cached/previous failed validation). The root cert was issued, so DNS and Cloudflare configuration look correct.
Make sure your DNS record for www.<yourdomain>.com is pointing to the IPv6 and not the IPv4 of your app. I can’t check as it’s behind Cloudflare, but from the errors we can see on our end it seems like your apex domain is pointed to the v6 and the www subdomain is pointed to the v4.
ah, sorry, I missed this was about your wildcard certificate. I see all the wildcard certificates on your account as correctly validated. which certificate are you having trouble with? (you can email me at email redacted if you don’t want to post it publicly)