The certStatus for the Default Domain Validation (DV) certificate you created for your property hostname may indicate various types of deployment failure, such as PROHIBITED_DOMAIN_FAILURE, CAA_MISMATCH_FAILURE, CNAME_MISSING_FAILURE,UNKNOWN_FAILURE or STALLED. To resolve that, you need to fix the underlying problem – for example, CAA_MISMATCH_FAILURE requires that you correct the CAA record – and then trigger a new validation process.
Once you fix the certificate issue, follow these steps to re-launch a validation:
- Create a new property version.
- Update hostnames for a property version, changing
certProvisioningTypefromDEFAULTtoCPS_MANAGED. - Activate the property version on staging and, after testing, on production.
- Create another property version.
- Update hostnames for a property version, changing
certProvisioningTypeback fromCPS_MANAGEDtoDEFAULT. - Activate the property version on staging and, after testing, on production.
