kubectl get certificaterequest

kubectl get cr
NAME         APPROVED   DENIED   READY   ISSUER             REQUESTOR                                         AGE
your-app-1   True                False   letsencrypt-prod   system:serviceaccount:cert-manager:cert-manager   43m

kubectl describe challenge

• kind: Order, kubectl describe order
• kind: Certificate, kind: Order, kind: Challenge
• CertificateRequest, kubectl get cr -A, kubectl describe cr -A, kubectl describe challenge -A