Remove duplicate certificate

I ran certbot --apache initially and it failed. I changed the setup to fix an issue, and ran certbot --apache again. This time it worked, but now I have two sets of certificates: and

How do I remove the duplicate certificate ( I've tried both of the following commands but neither worked with what I was attempting:

certbot delete
certbot deactivate

What's the best way to remove the duplicate?

My domain is:

I ran this command: certbot --apache (twice)

It produced this output: NA

My web server is (include version): Apache

The operating system my web server runs on is (include version): Ubuntu 20.04

My hosting provider, if applicable, is: NA

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 1.16.0


Welcome to the Let's Encrypt Community :slightly_smiling_face:

First, check your apache configuration files starting with:

sudo apachectl -S

to ensure that you're not using the certificate. You may need to run:

sudo certbot certificates

to ensure that the certificate covers the domain names that you want.

Second, delete the certificate with:

sudo certbot delete --cert-name

Third, are you sure you don't need a certificate covering both and

sudo certbot --cert-name --apache -d ","

Complete certificate history for


Thank you! sudo certbot delete --cert-name did the trick!

The first from today covered the domain names I needed. (It looks like today's certificates haven't shown up in the certificate history yet.)


I really think you need that certificate covering both the apex and www:


I kept the certificate that covers www. I just need to fix the server set up. Found the following certs:

  Certificate Name:
    Serial Number: 4a5d138759a8e240ae603242d01f406c2cb
    Key Type: RSA
    Expiry Date: 2021-09-18 22:14:50+00:00 (VALID: 89 days)
    Certificate Path: /etc/letsencrypt/live/
    Private Key Path: /etc/letsencrypt/live/

Maybe reload apache?

sudo apachectl -k graceful


These should also 301 redirect to https rather than failing:
400 Bad Request
400 Bad Request

You can test your redirects with:


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.