# ca_unreachable

We couldn't reach the certificate authority to issue the certificate.

## What it means

Issuing a certificate means talking to the certificate authority over the network. Those requests timed out or failed on every attempt in this round. Nothing is wrong with the domain: DNS is verified and the domain is routed.

## Why it happens

- The certificate authority had an outage or was degraded. Its own status page usually shows it.
- A network problem between our edge and the certificate authority.

## What to do

1. Nothing: we retry automatically with backoff (1 min, 5 min, 30 min, 2 h, then every 12 h).
2. If it lasts more than a few hours, check [our status page](https://status.apexly.dev).
3. `POST /v1/domains/{id}/verify` retries right away once the outage is over.

- [Open this domain in the dashboard](/app/domains)
- [See the domain state machine](/docs/concepts/domain-states)

## In the API

```
"status": "cert_failed",
"status_reason":
  "ca_unreachable"
```