How to delete certificates?

Help
1

My domain is: potatino.com , www.potatino.com, dev.potatinocom

I ran this command: certbot -d potatino.com,www.potatino.com,dev.potatino.com --force-renewal
and something like this

It produced this output: it generate two extra certificate which generate error

image
image731×377 11.2 KB

i am very new so i dont know full info
My web server is (include version): digital ocean

The operating system my web server runs on is (include version): putty

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know): yes, i run all command on putty

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 0.40.0

so how to delete the extra certificate and make new certificate for succesfully live website

my old certificates list is below, it was running smooth but it was expired, so i do these thing

certificate name : dev.potatino.com
.... Domains: dev.potatino.com
certificate name : potatino.com
.... Domains: potatino.com , www.potatino.com

2

There's an entire chapter dedicated for this in the Certbot documentation. Please read all of it carefully:

https://eff-certbot.readthedocs.io/en/stable/using.html#deleting-certificates

Also, why did you use --force-renewal? That option is NOT to be used except for very specific situations and I'm pretty sure this isn't one of them.

2 Likes
3

You should work this certificate problem backwards (in the opposite direction).
Start with the vhost configs.
[apachectl -t -D DUMP_VHOSTS]
See which certs are being used (and how) in all the vhosts.
Consolidate certificate use (if possible).
And remove any remaining unused certs.
[certbot delete --cert-name XXX]

For renewals:
all you need is "certbot renew"
[If that fails, come post about it here]

2 Likes
4

Was there any dialog?
[Did certbot ask any questions?]
I'm pretty certain that it did exactly what you asked it to do.
Unless Apache is to blame...

2 Likes
5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.