title: How to create another issuer for another subdomain in Kubernetes using Nginx-ingress controller?
body: <p>I am trying to create another Issuer can for another subdomain.  I am following this example: <a href="https://github.com/digitalocean/Kubernetes-Starter-Kit-Developers/blob/main/03-setup-ingress-controller/nginx.md" rel="nofollow noreferrer">Digital Ocean Kubernetes tutorial</a> and in this example the author gives an example for the <a href="http://echo.starter-kit.online/" rel="nofollow noreferrer">http://echo.starter-kit.online/</a> subdomain which I was able to get working using my own subdomain.</p>
  <p>I am trying to get this working for the quote.starter-kit.online example by creating a new Issuer like following:</p>
  <pre><code>---
  apiVersion: cert-manager.io/v1
  kind: Issuer
  metadata:
    name: quote-letsencrypt-nginx
    namespace: backend
  spec:
    # ACME issuer configuration
    # `email` - the email address to be associated with the ACME account (make sure it's a valid one)
    # `server` - the URL used to access the ACME server’s directory endpoint
    # `privateKeySecretRef` - Kubernetes Secret to store the automatically generated ACME account private key
    acme:
      email: my@mydomain.com
      server: https://acme-v02.api.letsencrypt.org/directory
      privateKeySecretRef:
        name: quote-letsencrypt-nginx-private-key
      solvers:
        # Use the HTTP-01 challenge provider
        - http01:
            ingress:
              class: nginx
  </code></pre>
  <p>And the following Ingress rule for the quote subdomain:</p>
  <pre><code>apiVersion: networking.k8s.io/v1
  kind: Ingress
  metadata:
    name: ingress-quote
    namespace: backend
    annotations:
      cert-manager.io/issuer: letsencrypt-nginx
  spec:
    tls:
    - hosts:
      - quote.mydomain.com
      secretName: quote-letsencrypt
    rules:
      - host: quote.mydomain.com
        http:
          paths:
            - path: /
              pathType: Prefix
              backend:
                service:
                  name: quote
                  port:
                    number: 8080
    ingressClassName: nginx
  </code></pre>
  <p>when I do the following:</p>
  <pre><code>&gt;kubectl get certificates -n backend
  NAME                      READY   SECRET                    AGE
  letsencrypt-nginx         True    letsencrypt-nginx         5d2h
  quote-letsencrypt-nginx   False   quote-letsencrypt-nginx   2s
  </code></pre>
  <p>I can see the certs.  However, when I do the following I see the https is not working:</p>
  <pre><code> curl -Li quote.mydomain.com         
  HTTP/1.1 308 Permanent Redirect
  Date: Sun, 02 Jan 2022 23:49:40 GMT
  Content-Type: text/html
  Content-Length: 164
  Connection: keep-alive
  Location: https://quote.mydomain.com
  
  curl: (60) SSL certificate problem: unable to get local issuer certificate
  More details here: https://curl.haxx.se/docs/sslcerts.html
  
  curl failed to verify the legitimacy of the server and therefore could not
  establish a secure connection to it. To learn more about this situation and
  how to fix it, please visit the web page mentioned above.
  </code></pre>