<p>After almost 1 year without a problem, I realized that cert-manager can't produce certificates anymore.</p>
<p>I started seeing this error:</p>
<blockquote>
<p>Error from server: conversion webhook for cert-manager.io/v1alpha2,
Kind=Certificate failed: Post
&quot;https://cert-manager-webhook.cert-manager.svc:443/convert?timeout=30s&quot;:
x509: certificate has expired or is not yet valid: current time
2021-12-05T01:02:15Z is after 2021-12-03T14:15:56Z</p>
</blockquote>
<p>I do NOT have a problem with the existing certificates/domains. But, it can't create certs for new domains.</p>
<p>Also,</p>
<pre><code>kubectl get cert
</code></pre>
<p>has the same error output.</p>
<p>What is the recommended solution?</p>

<p>Manually deleting secrets <code>cert-manager-webhook-ca</code> and <code>cert-manager-webhook-tls</code> may work in this case. Cert-manager controller will automatically create the deleted secrets afterwards.</p>
