I am trying to revoke a cert using the end-entity certificate and the private key used in generating the cert, but for whatever reason, I'm getting the error:
acme.messages.Error: urn:ietf:params:acme:error:unauthorized :: The client lacks sufficient authorization :: unable to revoke :: requester does not control all names in cert with serial "fa61ef2a7b4c982461a94c24c0402dded6f4"
That's strange. I am able to look it up using this website: SSL & CSR Decoder unless you're referring to other non-public tools.
There's only one domain in the CN(and SAN) which is the one I got the cert for initially.
Well Staging Environment - Let's Encrypt
"Important: Do not add the staging root or intermediate to a trust store that you use for ordinary browsing or other activities, since they are not audited or held to the same standards as our production roots, and so are not safe to use for anything other than testing."
Therefor I see NO Reason to support Revoking of those Certificate since there were never SAFE to begin with.
Yes.
I just needed to format the private key (pk) into a JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPrivateKey object at 0x7f7b40ea0940>)>) type of object.