Our certificate checks for both domains were still failing as of 20:47 UTC today because the HTTP challenge was not reaching us. Those checks resolve DNS through a public recursive resolver, so answers cached from the previous Jimdo setup can outlast the switch to INWX even though the authoritative nameservers are already correct. From our own vantage point the apex already reaches our edge and the challenge path answers correctly.

No record changes are needed. Once those cached answers expire, which can take as long as the old records' TTL after the nameserver change, the checks will pass and issuance will continue on its own. A manual retry would stop at the same check until then.