← Start of tutorial

WIUNIX ACADEMY

cert-manager DNS-01 renewal stuck? Trace Certificate, Order and authoritative TXT

Page 3 of 3. Review the earlier steps and prerequisites before continuing.

YOUR SYSTEM. YOUR STEPS.

Where are you working?

Choose your OS and version. The prerequisites, commands and troubleshooting follow your environment.

Debian 13Reviewed against official documentation ·

USE YOUR OWN VALUES

Configure this tutorial

Set the example values for your environment; related explanations and copy panels update together. Never enter passwords, private keys or tokens. Values stay in this tab and are not sent to the server or share links. Check actual DNS, certificates and network policy before running commands.

Different IP addresses, domains or ports? Open the settings below, change the values and select “Apply to tutorial”, then copy the updated commands.

Set values for my environment12 editable values

Preserve the working certificate during recovery

Rollback only the reviewed controller/Issuer source change through its owning deployment mechanism; preserve the current TLS Secret and ACME account unless the incident explicitly requires rotation. A rollback cannot reverse CA issuance or recover an already expired certificate. If expiry is imminent, use the organization’s approved alternate certificate/ingress incident process and verify the external handshake. Record renewalTime and alert on remaining validity before the next renewal.

GO TO THE SOURCE

Official references

Each environment states how it was reviewed. A documentation review does not claim a hands-on test of every version.

Explore all tutorials ↗