BUSINESS PROBLEM
If the downstream CA service is down for any reason, Venafi TPP changes the status of certificate object to Error.

The scenario to reproduce this is simple
cert-manager--->Venafi TPP--->MSCA

cert-manager and MSCA could be replaced with any consumer and provider.

• Request a certificate using cert-manager
• Stop the MSCA service
• Trigger a certificate renewal using cert-manager
• As expected the renewal fails because Venafi cannot reach the downstream MSCA service
• Renewal fails with a proper error that can be seen in the CertificateRequest resource
• Venafi TPP during it's attempt to reach MSCA fails and marks the status of the certificate object as "Error"
• Start the MSCA service
• Trigger a manual renewal again.
• This fails and there is no recovery. Unless the certificate object is reset any attempts to renew this certificate results in Error

PROPOSED SOLUTION
vCert provides a mechanism to reset the certificate object so consumers can attempt to heal the situation.

CURRENT ALTERNATIVES
Currently, the only way to recover is to manually reset the certificate object in the UI and retry a renewal via API.