Your DNS is correctly configured and domain ownership is verified, but the certificate pipeline stalled after verification passed. We've started a certificate re-issuance for shelfstalk.com, which may take a few minutes to complete.

Hi, the status is still the same on the domain. Could you check on the re-issuance you started and let me know what's blocking it, or trigger it again? Happy to remove and re-add the custom domain again if that helps on your end — just let me know before I do, since that changed the CNAME target last time.

Your DNS and verification records are still correct, but the certificate pipeline has stalled again in the same state. We've started another certificate re-issuance, which may take a few minutes to complete. No need to remove and re-add the domain on your side.

hey, it is still stuck at the same place after an hour, is there anything else that needs to be done?

Your CNAME and TXT verification records are correct, but the certificate still cannot issue because an A record (or URL redirect/forwarding rule) at your registrar is intercepting HTTP requests on the root domain before they reach our edge. Specifically, the ACME ownership challenge is being redirected to the www subdomain, which does not resolve, so the validation request never completes. Removing that A record or forwarding rule from your registrar's DNS settings will let the challenge reach us, and the certificate will issue on its own once it does.