I0826 19:29:20.219451       1 feature_gate.go:249] feature gates: &{map[AdditionalCertificateOutputFormats:true]}
I0826 19:29:20.219637       1 start.go:75] cert-manager "msg"="starting controller" "git-commit"="b1d501c85d97afd2adde2e86c2b119ac060caece" "version"="v1.11.5"
I0826 19:29:20.219702       1 controller.go:242] cert-manager/controller/build-context "msg"="configured acme dns01 nameservers" "nameservers"=["10.96.0.10:53"]
W0826 19:29:20.219803       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0826 19:29:20.221451       1 controller.go:70] cert-manager/controller "msg"="enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" 
I0826 19:29:20.221953       1 controller.go:134] cert-manager/controller "msg"="starting leader election" 
I0826 19:29:20.222189       1 controller.go:91] cert-manager/controller "msg"="starting metrics server" "address"={"IP":"::","Port":9402,"Zone":""}
I0826 19:29:20.222613       1 leaderelection.go:248] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0826 19:29:20.238499       1 leaderelection.go:258] successfully acquired lease cert-manager/cert-manager-controller
I0826 19:29:20.241128       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-acme"
I0826 19:29:20.241191       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-request-manager"
I0826 19:29:20.242707       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="issuers"
I0826 19:29:20.243384       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="orders"
I0826 19:29:20.244178       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-ca"
I0826 19:29:20.246232       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-key-manager"
I0826 19:29:20.247690       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-ca"
I0826 19:29:20.247779       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-trigger"
I0826 19:29:20.247858       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-vault"
I0826 19:29:20.247924       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-venafi"
I0826 19:29:20.247970       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="gateway-shim"
I0826 19:29:20.248891       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-approver"
I0826 19:29:20.249689       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-readiness"
I0826 19:29:20.250336       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-issuing"
I0826 19:29:20.251047       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-metrics"
I0826 19:29:20.252058       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="challenges"
I0826 19:29:20.252748       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-acme"
I0826 19:29:20.253433       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-vault"
I0826 19:29:20.253959       1 controller.go:182] cert-manager/controller "msg"="not starting controller as it's disabled" "controller"="certificatesigningrequests-issuer-selfsigned"
I0826 19:29:20.254027       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificates-revision-manager"
I0826 19:29:20.254717       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="clusterissuers"
I0826 19:29:20.255361       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="ingress-shim"
I0826 19:29:20.257169       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-selfsigned"
I0826 19:29:20.258445       1 controller.go:205] cert-manager/controller "msg"="starting controller" "controller"="certificaterequests-issuer-venafi"
I0826 19:29:45.665581       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-26 19:29:45.665552409 +0000 UTC m=+25.503728371
I0826 19:29:45.695796       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-26 19:29:45.69577977 +0000 UTC m=+25.533955722
I0826 19:29:45.703909       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="cert-manager-test/selfsigned-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:45.703962       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-26 19:29:45.703947579 +0000 UTC m=+25.542123531
E0826 19:29:45.734255       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"test-selfsigned\" not found" 
E0826 19:29:45.755596       1 controller.go:167] cert-manager/certificates-trigger "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert"
E0826 19:29:45.755805       1 controller.go:167] cert-manager/certificates-readiness "msg"="re-queuing item due to error processing" "error"="certificates.cert-manager.io \"selfsigned-cert\" not found" "key"="cert-manager-test/selfsigned-cert"
I0826 19:29:45.762553       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-26 19:29:45.762540025 +0000 UTC m=+25.600715977
I0826 19:29:45.786759       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-26 19:29:45.786746368 +0000 UTC m=+25.624922320
I0826 19:29:45.786812       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:45.787055       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-26 19:29:45.787049464 +0000 UTC m=+25.625225426
I0826 19:29:45.799337       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0826 19:29:45.799455       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-system/capi-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:45.799490       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-26 19:29:45.799481264 +0000 UTC m=+25.637657256
I0826 19:29:46.018262       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0826 19:29:46.028229       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-cdd7t" condition "Approved" to 2026-08-26 19:29:46.028215965 +0000 UTC m=+25.866391917
I0826 19:29:46.056977       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-cdd7t" condition "Ready" to 2026-08-26 19:29:46.056966464 +0000 UTC m=+25.895142416
I0826 19:29:46.123835       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:46.123820661 +0000 UTC m=+25.961996613
I0826 19:29:46.167102       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0826 19:29:46.171747       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:46.17170654 +0000 UTC m=+26.009882492
I0826 19:29:46.203190       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0826 19:29:46.220577       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-system/capi-serving-cert"
I0826 19:29:46.449318       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-26 19:29:46.449305895 +0000 UTC m=+26.287481847
I0826 19:29:46.469838       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:46.469862       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-26 19:29:46.469857594 +0000 UTC m=+26.308033546
I0826 19:29:46.470184       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-26 19:29:46.470163438 +0000 UTC m=+26.308339430
I0826 19:29:46.493505       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0826 19:29:46.493610       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-26 19:29:46.493605631 +0000 UTC m=+26.331781583
I0826 19:29:46.638621       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0826 19:29:46.710152       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-56jl8" condition "Approved" to 2026-08-26 19:29:46.710141703 +0000 UTC m=+26.548317655
I0826 19:29:46.745547       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-56jl8" condition "Ready" to 2026-08-26 19:29:46.74553775 +0000 UTC m=+26.583713692
I0826 19:29:46.838243       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:46.838229113 +0000 UTC m=+26.676405055
I0826 19:29:46.870211       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0826 19:29:46.923316       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert"
I0826 19:29:46.959235       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-26 19:29:46.95919913 +0000 UTC m=+26.797375082
I0826 19:29:46.978693       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:46.978758       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-26 19:29:46.978748795 +0000 UTC m=+26.816924747
I0826 19:29:46.979272       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-26 19:29:46.979255913 +0000 UTC m=+26.817431865
I0826 19:29:46.997546       1 controller.go:162] cert-manager/certificates-trigger "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0826 19:29:46.997599       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:46.997614       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-26 19:29:46.99761031 +0000 UTC m=+26.835786262
I0826 19:29:47.155694       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0826 19:29:47.181979       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x7cdn" condition "Approved" to 2026-08-26 19:29:47.181964282 +0000 UTC m=+27.020140234
I0826 19:29:47.226550       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-x7cdn" condition "Ready" to 2026-08-26 19:29:47.226539573 +0000 UTC m=+27.064715515
I0826 19:29:47.350460       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:47.350449322 +0000 UTC m=+27.188625274
I0826 19:29:47.415536       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-26 19:29:47.415522003 +0000 UTC m=+27.253697955
I0826 19:29:47.429833       1 trigger_controller.go:200] cert-manager/certificates-trigger "msg"="Certificate must be re-issued" "key"="capo-system/capo-serving-cert" "message"="Issuing certificate as Secret does not exist" "reason"="DoesNotExist"
I0826 19:29:47.429860       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-26 19:29:47.429854872 +0000 UTC m=+27.268030814
I0826 19:29:47.429915       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-26 19:29:47.429902122 +0000 UTC m=+27.268078074
I0826 19:29:47.467154       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert"
I0826 19:29:47.618633       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0826 19:29:47.618721       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-26 19:29:47.61871616 +0000 UTC m=+27.456892112
I0826 19:29:48.048413       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0826 19:29:48.236185       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pcxth" condition "Approved" to 2026-08-26 19:29:48.236172416 +0000 UTC m=+28.074348368
I0826 19:29:48.521076       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-pcxth" condition "Ready" to 2026-08-26 19:29:48.521057016 +0000 UTC m=+28.359232998
I0826 19:29:48.803017       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:48.802994794 +0000 UTC m=+28.641170776
I0826 19:29:48.903990       1 controller.go:162] cert-manager/certificates-readiness "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0826 19:29:48.904510       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-26 19:29:48.904498105 +0000 UTC m=+28.742674097
I0826 19:29:49.152231       1 controller.go:162] cert-manager/certificates-key-manager "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
I0826 19:29:49.210053       1 controller.go:162] cert-manager/certificates-issuing "msg"="re-queuing item due to optimistic locking on resource" "error"="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" "key"="capo-system/capo-serving-cert"
E0826 19:31:18.785603       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-selfsigned-issuer\" not found" 
I0826 19:31:18.829201       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-26 19:31:18.829184421 +0000 UTC m=+118.667360413
I0826 19:31:18.857678       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-26 19:31:18.857669177 +0000 UTC m=+118.695845159
E0826 19:31:21.373264       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-bootstrap-selfsigned-issuer\" not found" 
I0826 19:31:21.429654       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-26 19:31:21.429641095 +0000 UTC m=+121.267817077
I0826 19:31:21.451799       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-26 19:31:21.451782989 +0000 UTC m=+121.289958971
E0826 19:31:23.272730       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capi-kubeadm-control-plane-selfsigned-issuer\" not found" 
I0826 19:31:23.301760       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-26 19:31:23.301732666 +0000 UTC m=+123.139908618
I0826 19:31:23.323082       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-26 19:31:23.323070778 +0000 UTC m=+123.161246730
E0826 19:31:25.162358       1 controller.go:137] cert-manager/issuers "msg"="issuer in work queue no longer exists" "error"="issuer.cert-manager.io \"capo-selfsigned-issuer\" not found" 
I0826 19:31:25.198630       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-26 19:31:25.198617598 +0000 UTC m=+125.036793560
I0826 19:31:25.237820       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-26 19:31:25.237677138 +0000 UTC m=+125.075853120