All renewal attempts have been exhausted, likely due to an invalid DNS
setup.
FailedRetryingCaaChecking
Most recent renewal failed due to a CAA retrieval failure. This means that
the domain's DNS provider does not properly handle CAA records, failing
requests for CAA records when no CAA records are defined. Renewals will
continue to fail until the DNS provider is changed or a CAA record is
added for the given domain. The last successfully provisioned certificate
may still be serving.
FailedRetryingCaaForbidden
Most recent renewal failed due to an explicit CAA record that does not
include one of the in-use CAs (Google CA and Let's Encrypt). Renewals will
continue to fail until the CAA is reconfigured. The last successfully
provisioned certificate may still be serving.
FailedRetryingNotVisible
Most recent renewal failed due to an invalid DNS setup and will be
retried. Renewal attempts will continue to fail until the certificate
domain's DNS configuration is fixed. The last successfully provisioned
certificate may still be serving.
Ok
Certificate was successfully obtained and inserted into the serving
system.
Pending
Certificate is under active attempts to acquire or renew.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-21 UTC."],[[["The latest version of the `Google.Cloud.AppEngine.V1` API is 2.4.0, with documentation available for versions ranging back to 1.0.0."],["This page documents the `ManagementStatus` enum, which defines the state of certificate management within the App Engine v1 API, detailing the status of certificate acquisition or renewal attempts."],["The `ManagementStatus` enum includes states like `Ok` for successful acquisition, `Pending` for active attempts, and various `Failed` states that indicate different types of DNS or CAA record issues."],["The `FailedRetrying` statuses indicate that a certificate renewal attempt has failed and provides reasons for the failure, which include CAA checking issues, CAA forbidden issues, and non-visible DNS setup issues, while also stating that the previously successful certificate may still be serving."],["The `FailedPermanent` status indicates that certificate renewal has permanently failed due to persistent issues such as an invalid DNS setup, and all retry attempts have been exhausted."]]],[]]
