Hi guys.

I wanted to remove a cert:
> $ ipa user-remove-cert ceph-mgr-dashboard --certificate=MIIEjDCCAvSgAwIBAgIFE2IWcoQwD.......

but that cert, other certs remain:
-> $ ipa cert-find
...
  Issuing CA: ipa
  Subject: CN=ceph-mgr-dashboard,O=MINE.PRIV
  Issuer: CN=Certificate Authority,O=MINE.PRIV
  Not Before: Mon Jul 28 16:13:37 2025 UTC
  Not After: Thu Jul 29 16:13:37 2027 UTC
  Serial number: 83250016898
  Serial number (hex): 0x1362167282
  Status: REVOKED
  Revoked: True

  Issuing CA: ipa
  Subject: CN=ceph-mgr-dashboard,O=MINE.PRIV
  Issuer: CN=Certificate Authority,O=MINE.PRIV
  Not Before: Wed Jul 30 14:22:24 2025 UTC
  Not After: Sat Jul 31 14:22:24 2027 UTC
  Serial number: 83250016899
  Serial number (hex): 0x1362167283
  Status: VALID
  Revoked: False

  Issuing CA: ipa
  Subject: CN=ceph-mgr-dashboard,O=MINE.PRIV
  Issuer: CN=Certificate Authority,O=MINE.PRIV
  Not Before: Wed Jul 30 14:34:34 2025 UTC
  Not After: Sat Jul 31 14:34:34 2027 UTC
  Serial number: 83250016900
  Serial number (hex): 0x1362167284
  Status: VALID
  Revoked: False
-----------------------------
Number of entries returned 96

How does one remove these certs?
If I remember correctly keys/requests are rendered externally and then IPA created certs - in case this matter.

many thanks, L.