# When you create a Certificate that uses an ACME issuer, which chain of resources does cert-manager create?

cert-manager, Hard (Expert), Architecture. https://k8wiz.com/uquiz/when-you-create-a-certificate-that-uses-an-acme-issuer-which-chain-of-resources-does-cert-manager-create

- A. Certificate → CertificateRequest → Order → Challenge
- B. Certificate → Order → Secret → Challenge
- C. Certificate → Challenge → CertificateRequest → Order
- D. Certificate → Issuer → Order → Secret

**Answer:** Certificate → CertificateRequest → Order → Challenge

**Explanation:** The Certificate controller creates a CertificateRequest that holds the CSR. For ACME issuers, that request creates an Order with the ACME server, and the Order creates one Challenge per domain to prove. Running 'kubectl describe' on each step, or 'cmctl status certificate', shows where issuance is stuck.