DNS changes are not always immediate. During propagation, some visitors may reach the old destination while others reach the new one. Avoid repeatedly changing the records while they are updating.
Enable SSL only after the domain points to the correct server. Then confirm that both the root and www versions redirect to the preferred HTTPS address.
