The CNAME interference is resolved so the default lego propagation check (querying Cloudflare authoritative NS) should work correctly now. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>