# What problem does the status.acme.ari.certID field added in cert-manager v1.21.3 fix?

cert-manager, Medium (Advanced), Troubleshooting. https://k8wiz.com/uquiz/what-problem-does-the-statusacmearicertid-field-added-in-cert-manager-v1213-fix

- A. ARI requests failing when the CA returns no renewal information
- B. Duplicate ACME orders created for one CertificateRequest
- C. A renewal loop caused by an ARI window from the previous certificate
- D. Expired ACME account keys blocking the renewal of a Certificate

**Answer:** A renewal loop caused by an ARI window from the previous certificate

**Explanation:** With the alpha ACMEUseARI feature gate on, cert-manager stores the CA's suggested renewal window in status.acme.ari. The window wasn't tied to a certificate, so after a reissue a stale window could trigger repeated re-issuance until the CA rate limit was hit. certID records which certificate the window belongs to, and the field is new in the v1.21.3 CRDs, so upgrade them too.
