Need to remove an SSL certificate from a domain in Plesk? Whether you're replacing it, cleaning up old certificates, or moving a domain, here's how to unassign and delete certificates.
Option A: Unassign a certificate (stop using it)
This removes the certificate from active use without deleting the file itself.
- Log in to Plesk.
- Go to Websites & Domains, find your domain, and click SSL/TLS Certificates.
- Click Unassign Certificate and confirm with OK.
Your domain will revert to HTTP. Browsers will show a "Not Secure" warning.
Option B: Delete a certificate from the repository
To permanently remove a certificate file from Plesk:
- First unassign the certificate (Option A above).
- On the SSL/TLS Certificates page, click Manage under "Download or remove existing certificates".
- Tick the checkbox next to the certificate you want to delete.
- Click Remove and confirm the deletion.
The certificate, private key, and CSR will be permanently deleted.
Important notes
- Unassign before deleting. You can't delete a certificate that's still assigned to a domain.
- Let's Encrypt auto-reissue: If the Keep websites secured toggle is on, Plesk will issue a new Let's Encrypt certificate automatically. Turn this off first if you don't want a replacement.
- Turn off HTTPS redirect. Removing SSL doesn't disable the HTTP-to-HTTPS redirect. If it's still active, visitors will get errors. Disable it under SSL/TLS Certificates for your domain.
- HSTS warning: If you previously enabled HSTS, browsers will keep forcing HTTPS until the cached max-age expires — even after you remove the certificate.
- Back up paid certificates first. Download the certificate and private key files before deleting. You can't recover them from Plesk once removed.
Troubleshooting
- "Remove" button greyed out: The certificate is still assigned. Unassign it first.
- Site shows HTTPS error after removal: Disable the HTTP-to-HTTPS redirect and clear your browser cache.
- Certificate reappears after deletion: The Keep websites secured toggle is auto-issuing a new Let's Encrypt certificate. Disable it.
