Issue happens because
1) when you create / publish an app through google play console, there is an option for enable Google Play App Signing. if you enable it will show
Google Play App Signing is enabled for this app.

then your Upload certificate details will change and you need to rewrite SHA-1 etc. certificate details in respective places.
2) You provided debug key store / SHA-1 certificate details instead of RELEASE certificate details
3) error while generating certificates.
Solution
1) Go to google play console
Relese management -> App signing
then you can see two types of certificate
1- Upload certificate ( your app certificate provided when generating signed apk)
2- App signing certificate ( because you enabled Google Play App Signing, so they provided new certificate details for your published apk)
you need to change uploaded certificate details with new details
provided by google play where ever you used it before. such as
Integrating google sign in (change SHA-1 of OAuth client),
facebook login (change key Hash (generate key hash using SHA-1
use this link or copy the key hash provided by facebook login
error screen), firebase etc.
2) provide release SHA-1 / keyHash
create / use Keystore details of signed apk.
using command prompt:
google / firebase SHA-1 :
keytool -exportcert -keystore path-to-debug-or-production-keystore -list -v
facebook release key hash:
keytool -exportcert -alias <user alias name> -keystore < keystore path> | <openssl-path> sha1 -binary | <openssl-path> base64
if asked for password enter your signed apk keystore password.