CertificateRequest

kubectl describe challenge -A

kubectl get certificaterequest
kubectl get cr
kubectl get cr -A
kubectl describe cr -A

 Warning  OrderFailed         77s    cert-manager-certificaterequests-issuer-acme        Failed to wait for order resource "quickstart-example-tls-1-92081487" to become ready: order is in "errored" state: Failed to create Order: 400 urn:ietf:params:acme:error:rejectedIdentifier: Error creating new order :: Cannot issue for "afcadfafafads.us-east-1.elb.amazonaws.com": The ACME server refuses to issue a certificate for this domain name, because it is forbidden by policy

 Warning  OrderFailed         2m21s  cert-manager-certificaterequests-issuer-acme        Failed to wait for order resource "your-helm-5-1-1330751468" to become ready: order is in "errored" state: Failed to create Order: 429 urn:ietf:params:acme:error:rateLimited: Error creating new order :: too many certificates (5) already issued for this exact set of domains in the last 168 hours: your.example.com, retry after 2024-02-17T04:06:16Z: see https://letsencrypt.org/docs/duplicate-certificate-limit/

sync.go .../... "propagation check failed" err="failed to perform self check GET request

 Events:
  Type    Reason     Age    From                                       Message
  ----    ------     ----   ----                                       -------
  Normal  Issuing    5m56s  cert-manager-certificates-trigger          Issuing certificate as Secret does not exist
  Normal  Generated  5m55s  cert-manager-certificates-key-manager      Stored new private key in temporary Secret resource "quickstart-example-tls-xswrs"
  Normal  Requested  5m55s  cert-manager-certificates-request-manager  Created new CertificateRequest resource "quickstart-example-tls-1"

kubectl get csr
Kubernetes CertificateSigningRequest API
OrderPending

• CertificateRequest, kubectl get cr -A, kubectl describe cr -A, kubectl describe challenge -A
• cert-manager, cert-manager-controller, ingress-shim, kind: Certificate, kind: ClusterIssuer, Kind: CertificateSigningRequest, kind: Issuer, kubectl [ get | describe ] certificates, cmctl, kubectl get issuer, kubectl get csr, IngressShim