I'm trying to get a google managed certificate for my app engine project, I've verified the domain on the web master's toolbox, I've got DNS set up and pointing correctly, but the spinner never stops for days.
I've tried removing and re-adding the domain and managed security.
From the console running
gcloud alpha app ssl-certificates list shows
FAILED_RETRYING_INTERNAL (the beta and regular version of the command just show nothing), the only documentation I've been able to find relating to that error is this comment which implies it's a transient error which should not be going on over night.
Other things of note: this is a subdomain for a .edu (i.e. oursite.university.edu) and it seems like other departments are using lets encrypt as well.