Restart a Default DV certificate validation

The certStatus for the Default Domain Validation (DV) certificate you created for your property hostname may indicate various types of deployment failure, such as PROHIBITED_DOMAIN_FAILURE, CAA_MISMATCH_FAILURE, CNAME_MISSING_FAILURE,UNKNOWN_FAILURE or STALLED. To resolve that, you need to fix the underlying problem – for example, CAA_MISMATCH_FAILURE requires that you correct the CAA record – and then trigger a new validation process.

Once you fix the certificate issue, follow these steps to re-launch a validation:

  1. Create a new property version.
  2. Update hostnames for a property version, changing certProvisioningType from DEFAULT to CPS_MANAGED.
  3. Activate the property version on staging and, after testing, on production.
  4. Create another property version.
  5. Update hostnames for a property version, changing certProvisioningType back from CPS_MANAGED to DEFAULT.
  6. Activate the property version on staging and, after testing, on production.