Certbot icon

Certbot

Manage Let's Encrypt SSL certificates via Certbot with Cloudflare DNS-01 validation

Revoke Certificate

AI-generated

Summary

Revoke an existing SSL certificate managed by Certbot either by its certificate name or by specifying the full certificate file path. Optionally specify a revocation reason and choose whether to delete the certificate files after revocation.

Inputs

  • Use Sudo — Whether to prepend "sudo" to the certbot command for elevated privileges.
  • Revoke By (required) — Choose to identify the certificate by its name or by its full file path.
  • Certificate Name (required) — Name of the certificate to revoke (required if revoking by name).
  • Certificate Path (required) — Full path to the certificate file to revoke (required if revoking by path).
  • Reason — Reason for revoking the certificate, such as key compromise or cessation of operation.
  • Delete After Revoke — Option to delete the certificate files from the system after revocation.

Output shape

a single JSON object per item with properties: success (boolean), certName (the identifier used), and rawOutput (full certbot cli output string).

The output confirms success and returns the certName used or the path if specified by file path, along with raw certbot command output. Command runs non-interactively, and errors will throw unless continueOnFail is enabled.

Examples

Example 1: Revoke certificate by name without deleting files

Use Sudo: false; Revoke By: Certificate Name; Certificate Name: example.com; Reason: keycompromise; Delete After Revoke: false

Example 2: Revoke certificate by file path and delete files

Use Sudo: true; Revoke By: Certificate Path; Certificate Path: /etc/letsencrypt/live/example.com/cert.pem; Reason: superseded; Delete After Revoke: true

Links

Discussion