SSL

[x86_128]

Helllo,
I've created ceertificate, but it's status: PROVISIONING for 2 hours.

```
gcloud compute ssl-certificates describe mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
creationTimestamp: '2025-02-24T03:17:40.212-08:00'
id: '7909269187352193979'
kind: compute#sslCertificate
managed:
  domainStatus:
    app.apis-charlieai-ml.com: FAILED_NOT_VISIBLE
  domains:
  - app.apis-charlieai-ml.com
  status: PROVISIONING
name: mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
selfLink: https://www.googleapis.com/compute/v1/projects/charlie-ai/global/sslCertificates/mcrt-94a7195a-0f1d-...
type: MANAGED
```

Can you help me?

[debolek]

The FAILED_NOT_VISIBLE status indicates that the domain is not visible to the Google Cloud Certificate Authority. To resolve this issue:

1. Verify that the DNS records are correctly configured and pointing to the correct IP address.
2. Check DNS propagation to ensure that the changes have propagated globally.
3. Verify domain ownership in Google Search Console.

4. 1. A Record:

      • Type: A
      • Name: app.apis-charlieai-ml.com
      • Value: [Your Load Balancer or VM IP Address]

   2. CNAME Record (if applicable):

      • Type: CNAME
      • Name: www.app.apis-charlieai-ml.com
      • Value: app.apis-charlieai-ml.comUpdate DNS records if necessary and recreate the SSL certificate.

        Here is an example of how to configure the DNS records for your domain:

   Use the dig command to verify the DNS configuration:  dig app.apis-charlieai-ml.com

Ensure that the output shows the correct IP address.

        5. Recreate the SSL Certificate
If the DNS records were incorrect and you have updated them, you might need to delete the existing SSL certificate and create a new one:

Delete the Existing SSL Certificate:

gcloud compute ssl-certificates delete mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f

Crerate a new ssl certificate 

gcloud compute ssl-certificates create mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f \
--domains=app.apis-charlieai-ml.com

I hope this will help 

[x86_128]

DNS records are correct. IP is correct. Checked.

[x86_128]

✅ The DNS records are correctly configured and pointing to the correct IP
address.
✅ Check DNS propagation to ensure that the changes have propagated globally.
✅ Verify domain ownership in Google Search Console.

A Record:
✅ Type: A Name: app.apis-charlieai-ml.com Value: [Your Load Balancer or VM
IP Address]

CNAME Record (if applicable):
Type: CNAME Name: www.app.apis-charlieai-ml.com Value:
app.apis-charlieai-ml.comUpdate DNS records if necessary and recreate the
SSL certificate.

Here is an example of how to configure the DNS records for your domain:

✅ Use the dig command to verify the DNS configuration: dig
app.apis-charlieai-ml.com Status=✅

✅ Ensure that the output shows the correct IP address.

✅ 5. Recreate the SSL Certificate
If the DNS records were incorrect and you have updated them, you might need
to delete the existing SSL certificate and create a new one:

✅ Delete the Existing SSL Certificate:

✅ gcloud compute ssl-certificates delete
mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f

✅ Crerate a new ssl certificate

✅ gcloud compute ssl-certificates create
mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f \
--domains=app.apis-charlieai-ml.com


Everything is OK, except 'PROVISIONING' and 'FAILED_NOT_VISIBLE'
Nothing helped.

[talk2patel]

There are a number of possible reasons for this. Refer to the SSL certificate troubleshooting guide:  https://cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting

[x86_128]

Everything checked, everything tried, nothing helped.