eff-certbot.readthedocs.io

Revoke a certificate that must be invalidated (e.g. due to key compromise) using certbot revoke, then cleanly remove its local lineage with certbot delete, understanding revoke and delete are separate, non-automatic steps.

Set up and verify unattended automatic renewal of Certbot-managed certificates: confirm the pre-installed systemd timer or cron job, validate it with a dry run, and reload the web server only after a real renewal using --deploy-hook.