Mark Haney via FreeIPA-users wrote:
So now that we have a nicely replicating domain and ca, I'd like
to rid
myself of these revoked certificates which I tried as a way to fix the
replication and setting up of a CA. Is there a way to delete these
certs out of the store?
You'd have to do it using LDAP directly. There is nothing really wrong
with having a few revoked certs.
rob