Kubectl describe certificates

kubectl describe certificate your-certname
kubectl describe certificate your-certname -o yaml

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: "2022-07-19T10:04:17Z"
  generation: 1
  labels:
    chart: efi-1.2.0
    heritage: Tiller
    release: your-release
  name: prod-admin-tls-cert
  namespace: yourns
  resourceVersion: "8072080"
  uid: 470e7384-c120-4e08-8d2b-b7152e9521d3
spec:
  dnsNames:
  - your-subdomain.yourdomain.com
  issuerRef:
    kind: ClusterIssuer
    name: letsencrypt-clouddns-prod
  secretName: your-secret-nae
status:
  conditions:
  - lastTransitionTime: "2022-07-19T10:04:17Z"
    message: 'Existing issued Secret is not up to date for spec: [spec.commonName
      spec.dnsNames]'
    reason: SecretMismatch
    status: "False"
    type: Ready
  - lastTransitionTime: "2022-07-19T10:04:18Z"
    message: Issuing certificate as Secret was previously issued by Issuer.cert-manager.io/
    reason: IncorrectIssuer
    status: "True"
    type: Issuing
  nextPrivateKeySecretName: prod-admin-tls-cert-f6zts
  notAfter: "2022-08-21T13:19:36Z"
  notBefore: "2022-05-23T13:19:37Z"
  renewalTime: "2022-07-22T13:19:36Z"

See also

• cert-manager, cert-manager-controller, ingress-shim, kind: Certificate, kind: ClusterIssuer, Kind: CertificateSigningRequest, kind: Issuer, kubectl [ get | describe ] certificates, cmctl, kubectl get issuer, kubectl get csr, IngressShim