---
title: "Revoking ACME Certificates"
slug: "revoking-acme-certificates"
status: "update"
updated: 2025-02-05T05:41:34Z
published: 2025-02-05T05:41:34Z
canonical: "docs.zpesystems.com/revoking-acme-certificates"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zpesystems.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoking ACME Certificates

When a certificate is revoked, it is permanently invalid and cannot be reused or restored. This is a final action, usually taken because the certificate's private key has been compromised, the domain has changed ownership, or a serious security issue has occurred.

> [!CAUTION]
> - Signed Certificates with ACME that are being used by Webserver or IPsec cannot be Revoked.
> - Once a ACME Certificate is revoked, it cannot be renewed again. The Renew or Revoke buttons won’t show for the revoked certificate.

### Using Web UI:

To revoke an ACME certificate:

1. Navigate to *Security :: Certificates*.
2. In the Certificate Table, locate the Signed Certificate (ACME) that you want to revoke.
3. Click **Revoke Certificate**. The page gets redirected to the Certificate Table. ![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/Revoke_Cert_Button.png)
4. Verify the updated status (Revoked) of the certificate. ![](https://cdn.document360.io/763c5fb1-b9af-4ccd-9ad6-cf28ae4cd5a3/Images/Documentation/Revoked_Cert.png)

### Using CLI:

Run the following commands to revoke an ACME certificate:

1. Access /settings/certificates:
2. Locate the Signed Certificate (ACME):

```plaintext
[admin@nodegrid acme-http]# cd /settings/certificates
[admin@nodegrid certificates]# show
  name                  common name                  status  type                   issuer                                                                 issued on                 expires on                used by
  ====================  ===========================  ======  =====================  =====================================================================  ========================  ========================  =========
  nodegrid-default      e41a2c00752c                 Valid   Signed Certificate     ZPE Systems Inc e41a2c00752c                                           Nov  1 14:55:21 2024 GMT  Feb  4 14:55:21 2027 GMT  Webserver
  acme-http             acme-http.example.com        Valid   Signing Request (CSR)  -                                                                      -                         -
```
3. Check the certificate status.

```plaintext
[admin@ng-bugbuster acme-http01-v1-cert]# show
certificate name: acme-http01-v1-cert
status: Valid                                         <<<<<<<< Status
common name: acme-http01-v1.example.com.br
subject alternative names: acme-http01-v1.example.com.br
certificate issuer: (STAGING) Let's Encrypt (STAGING) False Fennel E6
issued on: Oct 29 15:48:50 2024 GMT
expires on: Jan  2 13:10:11 2025 GMT
key size: 256 bit
certificate:
-----BEGIN CERTIFICATE-----
MIIDtTCCAzygAwIBAgISKxytfvHqoeskmhnEm2f5MDz8MAoGCCqGSM49BAMDMFMx
...
-----END CERTIFICATE-----
use_ssl_certificate_trust_attributes = no
```
4. Type revoke_certificate.

```plaintext
[admin@ACME acme-http01-v1-cert]# revoke_certificate
```
5. Verify the revoked status again

```plaintext
[admin@ACME acme-http01-v1-cert]# show
certificate name: acme-http01-v1-cert
status: Revoked                                                       <<<<<<<< Status
common name: acme-http01-v1.example.com.br
subject alternative names: acme-http01-v1.example.com.br
certificate issuer: (STAGING) Let's Encrypt (STAGING) False Fennel E6
issued on: Oct 29 15:48:50 2024 GMT
expires on: Jan  2 13:10:11 2025 GMT
key size: 256 bit
certificate:
-----BEGIN CERTIFICATE-----
MIIDtTCCAzygAwIBAgISKxytfvHqoeskmhnEm2f5MDz8MAoGCCqGSM49BAMDMFMx
...
-----END CERTIFICATE-----
use_ssl_certificate_trust_attributes = no
```