HTTPS certificate stuck in "new" state for 9 days (custom domain, DNS checks all pass)

[yhdog0425-eng]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

Pages

Body

Hello,

The HTTPS certificate for my GitHub Pages custom domain has not been issued for 9 days.
GitHub Support closed my ticket (#4967482) and pointed me here, so I am asking the community.

Setup

• Repository: yhdog0425-eng/hanno-insatsu (public, "Deploy from a branch": master / root)
• Custom domain: www.hanno-insatsu.jp (apex: hanno-insatsu.jp)
• DNS (moved to XServer Domain on 2026-11-02):
  • www.hanno-insatsu.jp CNAME yhdog0425-eng.github.io
  • hanno-insatsu.jp A 185.199.108.153 / 185.199.109.153 / 185.199.110.153 / 185.199.111.153
  • The .jp registry delegation and the zone's own NS records agree (ns1/ns2/ns3.xdomain.ne.jp)
  • No AAAA records on the apex (www gets GitHub's IPv6 through the CNAME); no CAA record blocking Let's Encrypt

Current state (2026-11-11)

• Pages API https_certificate.state: "new" ("This domain was recently added. The certificate request process will begin shortly.")
• https_enforced: false (the "Enforce HTTPS" checkbox cannot be enabled)
• Pages health check: both www and apex are is_valid: true and is_https_eligible: true; https_error: "peer_failed_verification"
• The site is served correctly over HTTP. Over HTTPS, the *.github.io certificate is still served (name mismatch).

What I have tried

• Removed and re-added the custom domain several times (Nov 3, Nov 5, Nov 6), waiting 12+ hours each time. Once I left it removed for 30 minutes before adding it back.
• After the support reply, unpublished GitHub Pages for the repository and enabled it again (then set the custom domain again).
• After each attempt, the state goes back to "new" and never moves to "authorization_pending" or "issued".

Is there anything else I can do on my side, or does the certificate request need to be re-triggered by GitHub staff?
Any advice would be appreciated. Thank you.