title: can't get a trusted certificate from Let's encrypt using cert-manager
body: <p>I am setting up my first K8s cluster in Linode LKE and I have problem getting a trusted certificate from Lets Encrypt. firefox shows unsecure connection with certificate name &quot;Kubernetes Ingress Controller Fake Certificate&quot;.</p>
  <p>I can't figure out what is missing and how can I troubleshoot this.</p>
  <p>Here is my ClusterIssuer and Ingress definitions. I tried the staging and the production acme urls but I couldn't get a trusted certificate.</p>
  <p>`</p>
  <pre><code>apiVersion: cert-manager.io/v1
  kind: ClusterIssuer
  metadata:
    name: letsencrypt-staging
  spec:
    acme:
      email: example@gmail.com
      server: https://acme-staging-v02.api.letsencrypt.org/directory
      privateKeySecretRef:
        # Secret resource that will be used to store the account's private key.
        name: letsencrypt-staging
      # Add a single challenge solver, HTTP01 using nginx
      solvers:
      - http01:
          ingress:
            class: nginx
  ---
  apiVersion: networking.k8s.io/v1
  kind: Ingress
  metadata:
    name: tb-https-loadbalancer
    namespace: thingsboard
    annotations:
      nginx.ingress.kubernetes.io/use-regex: &quot;true&quot;
      nginx.ingress.kubernetes.io/ssl-redirect: &quot;true&quot;
      nginx.ingress.kubernetes.io/proxy-read-timeout: &quot;3600&quot;
      cert-manager.io/cluster-issuer: &quot;letsencrypt-staging&quot;
  
  spec:
    ingressClassName: nginx
    tls:
    - hosts:
      - testing.com
      secretName: letsencrypt-staging
    rules:
      - host: testing.com
        http:
            paths:
  ...
  </code></pre>