My old certificate was for all my sub domains and it is set to expire very soon. My new certificates, one for each sub domain, are installed and working fine. There are no references to the old certoficate in any configs by exact file name. Best practice would be... revoke and delete OR l…

You can just let them expire, that's totally fine. You may choose to revoke if you want to ensure the old ones can't be used, perhaps because they're held by a server hosting company you're not using any more.

Most people will just let them expire. Revoking a certificate is necessary if you lose control of the private key or have another security incident. Revoking can be useful if you change hosting providers in a shared setting and do not trust the old company. If you control the servers involved it …

Hello @beason and Welcome to the community! Revoking a cert should be the LAST resort. * [image] jvanasco: Revoking a certificate is necessary if you lose control of the private key or have another security incident. Allowing the cert to expire will only (in most cases) generate an email fr…

[image] beason: revoke and delete These things should be mutually exclusive. I mean: If you can delete it, then why would you need to revoke it? In the case that you are somehow reusing the same private key [unusual, but possible], then revoking it may create a problem everywhere that priva…

[image] Certificate Revocation: An Animated Clarification Issuance Tech O…

[image] rg305: So... it would be a very strange case were "best practice" would be to do both [delete and revoke]. It's the other way around (revoke and then delete), but if there was a reason for revocation, why would you keep a revoked cert around? Thus, after a revocation, one probably wou…

Revoke or let expire

Issuance Policy

griffin June 8, 2023, 1:21am 7

Topic		Replies	Views
Should I revoque unused certs when adding SAN? Help	1	987	November 16, 2016
How to deal with expired certs Issuance Tech	2	1868	June 24, 2016
When I renew a certificate, does the old one get revoked? Help	10	5341	June 16, 2023
Certificates revoke after deleting Help	3	1445	May 8, 2020
End a certificate Help	3	1085	June 26, 2017

Revoke or let expire

Related topics