Creating a certificate often (maybe always?) returns status: unknown.
The "List certificates" endpoint can be polled afterwards to determine if the certificate exists or not. But if it doesn't exist, there's no way to tell if it's missing because the certificate creation failed or because it's still being created.
