# Traefik seems to not obtaining the SSL certificate that is supposed to acquire

**URL:** https://community.traefik.io/t/traefik-seems-to-not-obtaining-the-ssl-certificate-that-is-supposed-to-acquire/20018
**Category:** Traefik v2
**Tags:** kubernetes-ingress
**Created:** [September 29, 2023, 10:42am UTC](https://community.traefik.io/t/traefik-seems-to-not-obtaining-the-ssl-certificate-that-is-supposed-to-acquire/20018 "2023-09-29T10:42:29Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![agelosnm](https://avatars.discourse-cdn.com/v4/letter/a/e9a140/32.png) [@agelosnm](https://community.traefik.io/u/agelosnm)
#### Post date: [September 29, 2023, 10:42am UTC](https://community.traefik.io/t/traefik-seems-to-not-obtaining-the-ssl-certificate-that-is-supposed-to-acquire/20018/1 "2023-09-29T10:42:29Z")

</div>

I have configured an EKS cluster with Traefik for the ingress and cert-manager for managing SSL certs.  
While cert-manager operates normally (with Route53 as the issuer) and I am able to generate certificates, when I define them as secrets on the `IngressRoute` manifest it seems that the certificate is not being fetched.

```auto
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: test-api
  namespace: test
  annotations:
    kubernetes.io/ingress.class: traefik-external
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`eks.api.test.mydomain.com`)
      kind: Rule
      services:
        - name: test-api
          port: 8000
  tls:
    secretName: wildcard-mydomain-com-staging-tls

```

`secretName` is correct and the secret is configured correctly as well.

In the logs of Traefiik pod I see the below:

```auto
time="2023-09-29T10:24:29Z" level=debug msg="Adding route for eks.api.test.mydomain.com with TLS options default" entryPointName=websecure
time="2023-09-29T10:27:25Z" level=debug msg="Serving default certificate for request: \"eks.api.test.mydomain.com\""
time="2023-09-29T10:27:25Z" level=debug msg="http: TLS handshake error from 10.0.4.207:24669: remote error: tls: unknown certificate"
time="2023-09-29T10:27:35Z" level=debug msg="Serving default certificate for request: \"eks.api.test.mydomain.com\""
time="2023-09-29T10:27:35Z" level=debug msg="http: TLS handshake error from 10.0.4.207:29373: remote error: tls: unknown certificate"

```