When troubleshooting the what, when, why records are being created (and why or why not they're succeeding), it can be helpful to see what is actually being called by cert-manager and the ns1-webhook. To do this, a debug mode could be added that logs the endpoints being called.