# How to remove SSL certificate on pritunl-zero

**URL:** <https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045>\
**Category:** Pritunl Zero\
**Tags:** pritunl-zero\
**Created:** [May 9, 2024, 1:49am UTC](https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045 "2024-05-09T01:49:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ochid](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/o/90db22/32.png) [@ochid](https://forum.pritunl.com/u/ochid)\
**Post date:** [May 9, 2024, 1:49am UTC](https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045/1 "2024-05-09T01:49:41Z")

</div>

We already install pritunl zero on ubuntu 22.04.  
We have problem with create ssl certificate on pritunl-zero. we need to remove the old ssl certificate and create tne new one.

We already tried remove from menu certificate and create the new certificate but when we check from this url [SSL Checker](https://www.sslshopper.com/ssl-checker.html#hostname=domain.name) still showing the wrong certificate.

Is there any command cli that we can use to remove it ?

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 9, 2024, 2:52am UTC](https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045/2 "2024-05-09T02:52:41Z")

</div>

If the web console is accessible the certificate needs to be updated in the node settings. Select the certificate and click add certificate. Any invalid or unused certificates should be removed from the certificate list in the node settings. Certificates are matched by domain name if there is a valid and invalid certificate with the same domain name either could be selected.

If the web console is inaccessible because of a configuration issue you will need to run `sudo pritunl-zero reset-id`. Then `sudo systemctl restart pritunl-zero` this will create a new host with a default configuration. The host settings can then be copied to the new host from the hosts tab.

---

<div class="post-metadata">

**Author:** ![ochid](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/o/90db22/32.png) [@ochid](https://forum.pritunl.com/u/ochid)\
**Post date:** [May 9, 2024, 4:21am UTC](https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045/3 "2024-05-09T04:21:34Z")

</div>

We able to open the web console then remove the old certificate from menu certificate and nodes , after that we create the new certificate and add on the Nodes.

But when we checking we still got this error ssl

 ![Screenshot from 2024-05-09 11-16-09](https://forum-static.pritunl.com/original/1X/e727eccac8723c2a58abe05d21e3d1ae90dc173b.png)

Also checking directly on the server openssl s\_client -connect domain-name:443 -brief

 ![Screenshot from 2024-05-09 11-15-34](https://forum-static.pritunl.com/original/1X/bb3b3a0168f68893c80e83b7fdf0aff70fa587d2.png)

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 10, 2024, 6:42pm UTC](https://forum.pritunl.com/t/how-to-remove-ssl-certificate-on-pritunl-zero/2045/4 "2024-05-10T18:42:21Z")

</div>

In the certificates tab verify the DNS names listed on the right have the correct domains.