private Azure Container App & Custom domains

Question

My container app environment is private.

A load balancer has been created and have a private IP in the the delegated subnet for Azure Container App Environment.

I want to enable custom domains on the container app but bidding fails to create certificate.

I've firstly tried to create private dns, link it to the vnet but it fails.

I've checked the dns configuration, everything seems ok :

PS C:\Users\admin-avd> nslookup
Default Server:  UnKnown
Address:  168.63.129.16

> ca-xxxxxxx-waf.wonderfulpond-91113c68.francecentral.azurecontainerapps.io
Server:  UnKnown
Address:  168.63.129.16

Non-authoritative answer:
Name:    ca-xxxxxxx-waf.wonderfulpond-91113c68.francecentral.azurecontainerapps.io
Address:  10.20.128.60

> netbox-dev.xxxxxxx.intra
Server:  UnKnown
Address:  168.63.129.16

Non-authoritative answer:
Name:    netbox-dev.xxxxxxx.intra 
Address:  10.20.128.60

> set type=txt
> asuid.netbox-dev.xxxxxxx.intra
Server:  UnKnown
Address:  168.63.129.16
Non-authoritative answer:
asuid.netbox-dev.xxxxxxx.intra        text =
        "D297419FBCD42D0xxxxxxx818AB8B8426BC39BD3E64355095E9861555239"

I've got the same with public DNS.

My message are:

WARNING: Creating managed certificate 'mc-xxxxxxxxxxxx-cloud-0887' for netbox-dev.xxxxxxx.io.

It may take up to 20 minutes to create and issue a managed certificate.

then

Binding managed certificate 'mc-xxxxxxxxxxxx-netbox-dev-cloud-0887' to netbox-dev.xxxxxxxxx.io

│

│ ERROR: (CertificateProvisioningError) Certificate 'mc-xxxxxxxxxxxxxxxx-netbox-dev-cloud-0887' is not in succeeded provisioning state.