the issue is resolved.
the problem was after clicking apply button the code was generated for txt entries and it was expiring in about 30 minutes and dns servers were not updating in that time span.
i reapplied two to three times when dns server changed in less time, the ssl was applied