CertificateNotReady in Knative serving

[hyperwindy-EA]

What version of Knative?

1.16.0

Expected Behavior

The READY column in kubectl get ksvc is True

Actual Behavior

• I want to turn on TLS with a self-signed certificate, but after I have done everything following https://knative.dev/docs/serving/encryption/cluster-local-domain-tls/ it still shows that Certificate Not Ready as the image, I use KnativeServing 1.16.0 and Knative Operator 1.16.0.
  
• The kcert is also not ready.