i have created new SSL Certificate with same and non existing domain.
[root@webserver ssls]# certbot certificates
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Found the following certs:
Certificate Name: chnypc.net
Domains: chnypc.netacme.chnypc.netle.chnypc.netwww.chnypc.net
Expiry Date: 2018-12-17 07:30:52+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/chnypc.net/fullchain.pem
Private Key Path: /etc/letsencrypt/live/chnypc.net/privkey.pem
[root@webserver ssls]# certbot revoke --cert-path 1.pem
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
An unexpected error occurred:
The request message was malformed :: No such certificate
Please see the logfiles in /var/log/letsencrypt for more details.
You can't revoke the certificate using --cert-path without having the certificate's private key or having valid authorizations for every domain in the certificate as well or anyone could revoke any certificate.
Can we take a step back: Why are you trying to revoke this certificate? Unless you think the private key has been compromised I recommend that you don't revoke the certificate.
If you absolutely must revoke the certificate you should share the error you're receiving when following the "using a different authorized account" instructions. That's the only process that will let you revoke the certificate without the original private key.
and trying revoke certificate.
[root@webserver pem]# certbot revoke --cert-path test.pem
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
An unexpected error occurred: The request message was malformed :: No such certificate
Please see the logfiles in /var/log/letsencrypt for more details.
[root@webserver pem]# certbot revoke --cert-path test.pem
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org
An unexpected error occurred: The request message was malformed :: No such certificate
Please see the logfiles in /var/log/letsencrypt for more details.
i think i’m doing basic error but i can’t find it, maybe i didn’t understand document as correct.
You'll need to find and revoke the actual certificate instead. I can't seem to find it on crt.sh though, I guess it must still be running behind. Anyone know another way? (was there a way to get a cert by serial number from ACME or something like that?)
i have multiple issued certificate for wildcard *.chnypc.net and for revoke this certificate without any key i must create new certificate for *.chnypc.net.
and for revoke i run this command “certbot certonly --manual --preferred-challenges=dns -d *.chnypc.net”
and it’s getting error
*Error finalizing order :: too many certificates already issued for exact set of domains: .chnypc.net
how can i revoke this certificate?
ps: other certificates has been revoked successful.
You don't have to create a new certificate. You have to complete most of the steps of creating a new certificate: you have to validate the names, but don't have to issue a certificate. Some ACME clients may make it difficult or impossible to do one without also doing the other.
At this point, you can just do it. Validation succeeded. It failed at a later step in the process.
Do you need to issue any more certificates for that exact set of names?
