Cannot generate certificate with Netlify

[cripkd]

Hi everyone,
I'm trying to host my domain on netlify, it's been more than 24h and no certificate was generated.
I followed their troubleshooting guide and the way I understand it, everything seems to be ok. I've use letsdebug.net and everything seems to be alright there too.
Can you please help me? Thank you in advance

PS. One observation, I am using heroku for api.listi.ro and heroku did provide a SAN certificate for that subdomain, if that is relevant. https works on that subdomain.

My domain is: listi.ro

I ran this command: DNS Checker - DNS Check Propagation Tool

It produced this output: OK

My web server is (include version): Netlify

The operating system my web server runs on is (include version): Netlify

My hosting provider, if applicable, is: Netlify

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

[MikeMcQ]

Following that Troubleshooting Guide you provided it says that Netlify obtains the cert on your behalf. You need to contact them about why that doesn't work.

After all, that's one of the benefits of using a full-service hosting company.

We usually help people who run their own servers and use an ACME client to request Let's Encrypt certs.

[rg305]

Until then, are these correct?:

Name:      listi.ro
Addresses: 54.84.236.175 [aws]
           54.161.234.33 [aws]

Name:      www.listi.ro
Addresses: 34.148.19.16    [google]
           104.196.30.220  [google]

[MikeMcQ]

@rg305

Until then, are these correct?:

I see something diff. What am I missing?

dig +short listi.ro @dns1.p08.nsone.net
34.148.79.160
34.73.83.172

dig +short www.listi.ro @dns1.p08.nsone.net
54.161.234.33
34.74.170.74

Looks odd to me but does Netlify use multiple back-end services (redundancy maybe?)

[Osiris]

With every query, different IP addresses (always 2) are returned. Most of the time Amazon IP addresses, but also sometimes a Google IP address.

I don't know how NS1 actually works, but it looks like some kind of round-robin DNS stuff, but with incorrect IP addresses in the mix?

[cripkd]

Based on what Google says that is expected, Netlify acts a CDN and you get various edge nodes when you run those queries.

[MikeMcQ]

When I HTTP poke any of those IP addresses I see a server identified as Netlify. I think the ip addresses are fine.