If you uncheck both the certificate and the provision, do any of them turn green?
Does your shipping/development option choice in project settings match the kind of cert and provisioning profile you’re trying to use? That’s the main one that can go wrong and cause it to display in red.