It really doesn't help that the certbot user guide has contradictory information:
If your account key has been compromised or you otherwise need to revoke a certificate, use the
revoke
command to do so. Note that therevoke
command takes the certificate path (ending incert.pem
), not a certificate name or domain.
...
revoke Revoke a certificate (supply
--cert-name
or--cert-path
)
...
revoke
Revoke a certificate specified with
--cert-path
or--cert-name
Additionally, why is revoke
a "command" and delete
a "subcommand"?
You might want to heed this:
Once a certificate is revoked (or for other certificate management tasks), all of a certificate’s relevant files can be removed from the system with the
delete
subcommand:
certbot delete --cert-name auditor.noojee.com.au
and this:
Additionally...
There's no need to continually use account-registration parameters:
-m support@noojeeit.com.au --agree-tos
This is obsolete:
--manual-public-ip-logging-ok