SSL

Google Cloud Serverless Applications
1

Helllo,
I’ve created ceertificate, but it’s status: PROVISIONING for 2 hours.

gcloud compute ssl-certificates describe mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
creationTimestamp: '2025-02-24T03:17:40.212-08:00'
id: '7909269187352193979'
kind: compute#sslCertificate
managed:
domainStatus:
[app.apis-charlieai-ml.com](http://app.apis-charlieai-ml.com/): FAILED_NOT_VISIBLE
domains:
- [app.apis-charlieai-ml.com](http://app.apis-charlieai-ml.com/)
status: PROVISIONING
name: mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
selfLink: [https://www.googleapis.com/compute/v1/projects/charlie-ai/global/sslCertificates/mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f](https://www.googleapis.com/compute/v1/projects/charlie-ai/global/sslCertificates/mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f)
type: MANAGED

Can you help me?

2

The FAILED_NOT_VISIBLE status indicates that the domain is not visible to the Google Cloud Certificate Authority. To resolve this issue:

  1. Verify that the DNS records are correctly configured and pointing to the correct IP address.

  2. Check DNS propagation to ensure that the changes have propagated globally.

  3. Verify domain ownership in Google Search Console.

    1. A Record:

    2. CNAME Record (if applicable):

      • Type: CNAME

      • Name: www.app.apis-charlieai-ml.com

      • Value: app.apis-charlieai-ml.comUpdate DNS records if necessary and recreate the SSL certificate.

        Here is an example of how to configure the DNS records for your domain:

    Use the dig command to verify the DNS configuration: dig app.apis-charlieai-ml.com

Ensure that the output shows the correct IP address.

  1. Recreate the SSL Certificate
    If the DNS records were incorrect and you have updated them, you might need to delete the existing SSL certificate and create a new one:

Delete the Existing SSL Certificate:

gcloud compute ssl-certificates delete mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f

Crerate a new ssl certificate

gcloud compute ssl-certificates create mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
–domains=app.apis-charlieai-ml.com

I hope this will help

3

There are a number of possible reasons for this. Refer to the SSL certificate troubleshooting guide: https://cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting

talk2patel_1-1740414452318.png
talk2patel_1-1740414452318.png975×339 43.9 KB

talk2patel_0-1740414425355.png
talk2patel_0-1740414425355.png995×524 70.4 KB

4

DNS records are correct. IP is correct. Checked.

5

Everything checked, everything tried, nothing helped.

6

:white_check_mark: The DNS records are correctly configured and pointing to the correct IP
address.
:white_check_mark: Check DNS propagation to ensure that the changes have propagated globally.
:white_check_mark: Verify domain ownership in Google Search Console.

A Record:
:white_check_mark: Type: A Name: app.apis-charlieai-ml.com Value: [Your Load Balancer or VM
IP Address]

CNAME Record (if applicable):
Type: CNAME Name: www.app.apis-charlieai-ml.com Value:
app.apis-charlieai-ml.comUpdate DNS records if necessary and recreate the
SSL certificate.

Here is an example of how to configure the DNS records for your domain:

:white_check_mark: Use the dig command to verify the DNS configuration: dig
app.apis-charlieai-ml.com Status= :white_check_mark:

:white_check_mark: Ensure that the output shows the correct IP address.

:white_check_mark: 5. Recreate the SSL Certificate
If the DNS records were incorrect and you have updated them, you might need
to delete the existing SSL certificate and create a new one:

:white_check_mark: Delete the Existing SSL Certificate:

:white_check_mark: gcloud compute ssl-certificates delete
mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f

:white_check_mark: Crerate a new ssl certificate

:white_check_mark: gcloud compute ssl-certificates create
mcrt-94a7195a-0f1d-4c85-b67f-fb16fda2bf5f
–domains=app.apis-charlieai-ml.com

Everything is OK, except ‘PROVISIONING’ and ‘FAILED_NOT_VISIBLE’
Nothing helped.