Correct way to completely remove issued certificate(s) for a domain