# Which cert-manager resource shows a reason such as "Waiting for dns-01 challenge propagation" while its self-check runs?

cert-manager, Easy (Beginner), Troubleshooting. https://k8wiz.com/uquiz/which-cert-manager-resource-shows-a-reason-such-as-waiting-for-dns-01-challenge-propagation-while-its-self-check-runs

- A. Order
- B. Challenge
- C. CertificateRequest
- D. ClusterIssuer

**Answer:** Challenge

**Explanation:** Each ACME Order creates one Challenge per domain, and the Challenge runs the self-check before asking the ACME server to validate. kubectl get challenges shows the state and reason for each. A self-check that keeps failing is retried every 10 seconds until someone fixes the cause.