can or how can I correctly delete old let's encrypt certificates?

[santiagozky]

I've made a mess with my configuration. I deleted some files from old certs which I assumed were not needed and now I get several errors:

nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/npm-7/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/npm-7/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)

I had created previously a certificate which is under npm-13, so I went and deleted the old ones and now it fails. How can I solve the issue and what is the correct way of prune old certificates so I dont break this again?

[santiagozky]

ok. I think I figured out.
If you remove the certificate from the SSL Certificates menu, all the proxy hosts that are configured with such certificate start to display "HTTP only". But in reality the configuration was not applied in the file system. So if you delete the files nginx will fail to start.

The proper way seems to be

• Remove the certificate from every proxy host
• Delete the certificate from the SSL certificate menu
• Then you can delete those files.