Keys remain after revoking a certificate

@_az

It really doesn't help that the certbot user guide has contradictory information:

If your account key has been compromised or you otherwise need to revoke a certificate, use the revoke command to do so. Note that the revoke command takes the certificate path (ending in cert.pem), not a certificate name or domain.

...

revoke Revoke a certificate (supply --cert-name or --cert-path)

...

revoke

Revoke a certificate specified with --cert-path or --cert-name

Additionally, why is revoke a "command" and delete a "subcommand"?


@bsutton

You might want to heed this:

Once a certificate is revoked (or for other certificate management tasks), all of a certificate’s relevant files can be removed from the system with the delete subcommand:

certbot delete --cert-name auditor.noojee.com.au

and this:

Additionally...

There's no need to continually use account-registration parameters:

-m support@noojeeit.com.au --agree-tos

This is obsolete:

--manual-public-ip-logging-ok

1 Like