# Have any Certbot users used /etc/letsencrypt/{keys,csr,archive}?

**URL:** <https://community.letsencrypt.org/t/have-any-certbot-users-used-etc-letsencrypt-keys-csr-archive/78425>\
**Category:** Client dev\
**Created:** [November 26, 2018, 12:11am UTC](https://community.letsencrypt.org/t/have-any-certbot-users-used-etc-letsencrypt-keys-csr-archive/78425 "2018-11-26T00:11:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [November 26, 2018, 12:11am UTC](https://community.letsencrypt.org/t/have-any-certbot-users-used-etc-letsencrypt-keys-csr-archive/78425/1 "2018-11-26T00:11:32Z")

</div>

Certbot saves some old files in `/etc/letsencrypt/keys`, `/etc/letsencrypt/csr`, and `/etc/letsencrypt/archive` for various purposes. We don’t document these directories and we don’t encourage users to use them (or to modify them, which can cause problems sometimes). They date to a time when Certbot was more experimental and when we weren’t sure how automated it would be.

The answer turned out to be “very automated”, and we’ve been considering saving less old information in these directories.

> <https://github.com/certbot/certbot/issues/4634>

  

> <https://github.com/certbot/certbot/issues/4635>

I would like to know if any users who happen to already be aware of and to understand exactly what’s saved in these directories have made use of these files somehow.

(If you don’t know what’s saved in these directories, please don’t take this as an encouragement to poke around in them…)

The issue above doesn’t propose removing `archive` entirely, just shredding `privkey1` after `privkey2` becomes current, etc. This might also happen only when there is no change in domain name coverage in the certificate, in order to ensure that the archival value is unaffected.

---

<div class="post-metadata">

**Author:** ![schoen](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/schoen/32/79_2.png) [@schoen](https://community.letsencrypt.org/u/schoen)\
**Post date:** [December 26, 2018, 12:11am UTC](https://community.letsencrypt.org/t/have-any-certbot-users-used-etc-letsencrypt-keys-csr-archive/78425/2 "2018-12-26T00:11:39Z")

</div>

Closed on December 26, 2018, 12:11am UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.