@zellwk @Netlify You might find better help by going directly to the community forums. @Netlify don't monitor Twitter for support requests.
DNS can be so frustrating! Perhaps this thread might be relevant:
https://community.netlify.com/t/successful-dns-verification-but-let-s-encrypt-provision-keeps-failing/8074