Revoke certificate generated by a compromised host or DNS

Revocations should be done via API whenever possible. I'm not actually sure offhand what the answer to your question about two names is, but I will investigate.

Requests for revocation may also be done via email, though that may take longer. Please see our CPS for details: ISRG CPS v4.1 - Let's Encrypt

10 Likes