How can i remove the letsencrypt certificates

Support
, , , ,
1

Hi

I had setup the letsencrypt certificates inNS8, but i now use this via Nethsecurity
Deleting the in NS8 is not possible

<3>2025-07-20T17:21:36+02:00 unable to generate a certificate for the domains [sogo.pdebrabander.nl mail.pdebrabander.nl pdebrabander.nl]: error: one or more domains had a problem:
<3>[mail.pdebrabander.nl] invalid authorization: acme: error: 400 :: urn:ietf:params:acme:error:connection :: 213.93.33.97: Fetching http://mail.pdebrabander.nl/.well-known/acme-challenge/cjb4cKkeBt2106mCQgihB57XKKsXwAxqfAuQEaMj_Vs: Connection refused
<3>[pdebrabander.nl] invalid authorization: acme: error: 400 :: urn:ietf:params:acme:error:connection :: 213.93.33.97: Fetching http://pdebrabander.nl/.well-known/acme-challenge/t8JWgB3GaMEuS5fN-nbtgZA6PDUldkXHOq73MeQVRjM: Connection refused
<3>[sogo.pdebrabander.nl] invalid authorization: acme: error: 400 :: urn:ietf:params:acme:error:connection :: 213.93.33.97: Fetching http://sogo.pdebrabander.nl/.well-known/acme-challenge/N6mrNLL3oXsM0uGZzgJS4NO_o7u_tCOI5LuHWikK13g: Connection refused
<3>

How can i force the delete of these certificate in NS8?

2

Maybe it helps to remove the domains?

3

will it then delete the certificate?
I want to remove then all since i dont use anĂ˝ certificate in NS8

4

Yes, it should work to remove the certificates if they’re still listed.
You could keep a copy of _default_cert.yml in case something goes wrong.

5

Do i need to also the other commands

# runagent -m traefik1
$ cd configs/
$ vim _default_cert.yml (deleted the wrong domain)
$ cd ..
$ cd acme/
$ <acme.json jq --arg domain "intranet.domain.tld" '.acmeServer.Certificates |= map(select(.domain.main != $domain and ((.domain.sans//[])|contains([$domain])|not)))' >acme.json.acmejson-notify
$ cat acme.json.acmejson-notify >acme.json
$ systemctl --user restart traefik
$ exit

Or only edit the _default_cert.yml ?

6

AFAIK changes of the yml files are applied immediately. So it should just be about editing the _default_cert.yml.

If it’s not enough, you need to check the acme/acme.json file too.

1 Like
7

how does the .yml file looks like if i want to remove all certicates ?

can i delete this completly


        domain:
          main: sogo.pdebrabander.nl
          sans:
          - pdebrabander.nl
8
9

Thanks again.
I’m leaving the main certifate for now as it is.

Strange that you cannot delete the certificate in the UI.
I saw it is a bug, so i hope it is repaired soon

1 Like
10

last question (i hope)

Do i need to adjust the files “acme.json” and “acme.json.acmejson-notify”

11

If your acme.json contains the certificate domains to delete then it should be adapted too.

1 Like