I think this should do it:
db configuration delprop pki CrtFile
db configuration delprop pki KeyFile
db configuration delprop pki ChainFile
signal-event certificate-update
I think this should do it:
db configuration delprop pki CrtFile
db configuration delprop pki KeyFile
db configuration delprop pki ChainFile
signal-event certificate-update