Lumen help

Deleting a Let's Encrypt certificate

If you no longer need a Let's Encrypt certificate, you can delete it from Media portal. Depending on the state of the certificate, you may not be able to delete it until you complete a particular task. For example, you can't delete a certificate if it's referenced by a configuration in production. If the certificate is reference, edit the configuration first, save your changes, and promote the configuration to production. Once the changes propagate, you can then delete the certificate.

Note: Media portal automatically deletes unreferenced certificates as part of a daily cleanup process. Once a certificate is deleted, you need to request a new one.

Standard certificates

Certificate state	Description
active	The certificate is active and usable in Media portal.
stdPending	Standard certificates only. The certificate is being refreshed. The certificate may or may not be active during this load as well.

Let's Encrypt certificates

Certificate state	Description	Editable in this state?
active	The certificate is active and usable in Media portal.	Yes
leAcceptedCsrData	CSR data has been accepted as first step of creating/renewing the certificate.	No
leCnameCreationStarted	CName records are being created.	Yes
leCnameCreationComplete	CName records have been created.	Yes
leCreateRenewStarted	Let's Encrypt has started creating/renewing the certificate.	No
leCreateRenewWorkingChallenges	The Let's Encrypt agent is currently working through challenges while creating/renewing this certificate.	No
leCreateRenewAwaitingLeResponse	The Let's Encrypt agent waiting for the Let's Encrypt service while creating/renewing this certificate.	No
leCreateRenewFailed	Create/renew failed and there is no currently active certificate for this record.	Yes
leCleaningConfigs	Configurations are being cleaned	--
leRevokeInProgress	Certificate is in the process of being revoked.	--
leCnameCreationFailed	CName/FPDS records could not be created.	Yes
leRevokeComplete	The certificate was revoked successfully.	--
leRevokeFailed	The certificate could not be revoked.	--
leUnreferenced	The certificate isn't referenced by any SI in any production slot.	--

From the main menu, select My Services > Caching.

From the lists, select the access group and SCID (service component ID) you want to work with.

My Services - Caching (with SCID selected)

Click Manage Certificates.

Media portal lists the certificates associated with the SCID you selected. Certificates in active state are ready to use; certificates with other states may need your attention or may still being processed. Use the section below to learn more about certificate states, click the section below.