All renewal attempts have been exhausted, likely due to an invalid DNS
setup.
FailedRetryingCaaChecking
Most recent renewal failed due to a CAA retrieval failure. This means that
the domain's DNS provider does not properly handle CAA records, failing
requests for CAA records when no CAA records are defined. Renewals will
continue to fail until the DNS provider is changed or a CAA record is
added for the given domain. The last successfully provisioned certificate
may still be serving.
FailedRetryingCaaForbidden
Most recent renewal failed due to an explicit CAA record that does not
include one of the in-use CAs (Google CA and Let's Encrypt). Renewals will
continue to fail until the CAA is reconfigured. The last successfully
provisioned certificate may still be serving.
FailedRetryingNotVisible
Most recent renewal failed due to an invalid DNS setup and will be
retried. Renewal attempts will continue to fail until the certificate
domain's DNS configuration is fixed. The last successfully provisioned
certificate may still be serving.
Ok
Certificate was successfully obtained and inserted into the serving
system.
Pending
Certificate is under active attempts to acquire or renew.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eManagementStatus\u003c/code\u003e enum in the Google.Cloud.AppEngine.V1 API describes the state of certificate management for App Engine, focusing on the success or failure of certificate acquisition and renewal.\u003c/p\u003e\n"],["\u003cp\u003eThere are seven possible states defined in the \u003ccode\u003eManagementStatus\u003c/code\u003e enum, including \u003ccode\u003eOk\u003c/code\u003e for successful acquisition, \u003ccode\u003ePending\u003c/code\u003e for active attempts, and various \u003ccode\u003eFailed\u003c/code\u003e states that specify different reasons for certificate renewal failures.\u003c/p\u003e\n"],["\u003cp\u003eThe provided documentation offers versions ranging from 1.0.0 to 2.4.0 of the Google.Cloud.AppEngine.V1 API, with version 2.4.0 being the latest.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eFailedRetryingCaaForbidden\u003c/code\u003e field means the certificate failed because an explicit CAA record does not include one of the in-use CAs.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eFailedRetryingNotVisible\u003c/code\u003e field suggests a failed renewal due to an invalid DNS configuration.\u003c/p\u003e\n"]]],[],null,[]]
