You need to set that first record for www, not www.skuvault.social. If you use a DNS tester you’ll see that there’s no DNS record for www.skuvault.social, but there is one for www.skuvault.social.skuvault.social.
If you’ve run a bunch of rebuilds, your next issue will be that you hit let’s encrypt’s rate limit and your key is invalid. You’ll need to wait a week or follow Setting up Let’s Encrypt with Multiple Domains, which is a bit tricky.