You can refer to this documentation for additional details.

Here are the things to consider :

• The domain should pointing to the public IP address of your load balancer.

• Double check the annotation, ensure that the pre-shared-cert annotation is correctly set to the exact name of your managed certificate.

• Ensure that the certificate is in the Active state.

• Ensure that your DNS configuration matches the hostname in your ingress and the certificate.