All renewal attempts have been exhausted, likely due to an invalid DNS
setup.
FailedRetryingCaaChecking
Most recent renewal failed due to a CAA retrieval failure. This means that
the domain's DNS provider does not properly handle CAA records, failing
requests for CAA records when no CAA records are defined. Renewals will
continue to fail until the DNS provider is changed or a CAA record is
added for the given domain. The last successfully provisioned certificate
may still be serving.
FailedRetryingCaaForbidden
Most recent renewal failed due to an explicit CAA record that does not
include one of the in-use CAs (Google CA and Let's Encrypt). Renewals will
continue to fail until the CAA is reconfigured. The last successfully
provisioned certificate may still be serving.
FailedRetryingNotVisible
Most recent renewal failed due to an invalid DNS setup and will be
retried. Renewal attempts will continue to fail until the certificate
domain's DNS configuration is fixed. The last successfully provisioned
certificate may still be serving.
Ok
Certificate was successfully obtained and inserted into the serving
system.
Pending
Certificate is under active attempts to acquire or renew.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-04-17 UTC."],[[["The `ManagementStatus` enum details the state of certificate management, particularly regarding the success or failure of certificate acquisition and renewal attempts."],["The latest version of the Google.Cloud.AppEngine.V1 library is 2.4.0, with multiple previous versions available for reference."],["Possible `ManagementStatus` states include `Ok` for successful certificate management, `Pending` for active attempts, and various `Failed` states related to DNS or CAA issues."],["The `FailedRetryingCaaChecking` and `FailedRetryingCaaForbidden` states indicate that certificate renewal has failed due to problems with the domain's CAA records."],["The `FailedPermanent` status means there have been exhausted renewal attempts, likely due to an invalid DNS setup."]]],[]]