Need to remove an SSL certificate from a domain in Plesk? Whether you're replacing it, cleaning up old certificates, or moving a domain, here's how to unassign and delete certificates.

### Option A: Unassign a certificate (stop using it)

This removes the certificate from active use without deleting the file itself.

1. Log in to **Plesk**.
2. Go to **Websites & Domains**, find your domain, and click **SSL/TLS Certificates**.
3. Click **Unassign Certificate** and confirm with **OK**.

Your domain will revert to HTTP. Browsers will show a "Not Secure" warning.

### Option B: Delete a certificate from the repository

To permanently remove a certificate file from Plesk:

1. First unassign the certificate (Option A above).
2. On the SSL/TLS Certificates page, click **Manage** under "Download or remove existing certificates".
3. Tick the checkbox next to the certificate you want to delete.
4. Click **Remove** and confirm the deletion.

The certificate, private key, and CSR will be permanently deleted.

### Important notes

- **Unassign before deleting.** You can't delete a certificate that's still assigned to a domain.
- **Let's Encrypt auto-reissue:** If the **Keep websites secured** toggle is on, Plesk will issue a new Let's Encrypt certificate automatically. Turn this off first if you don't want a replacement.
- **Turn off HTTPS redirect.** Removing SSL doesn't disable the HTTP-to-HTTPS redirect. If it's still active, visitors will get errors. Disable it under **SSL/TLS Certificates** for your domain.
- **HSTS warning:** If you previously enabled HSTS, browsers will keep forcing HTTPS until the cached max-age expires — even after you remove the certificate.
- **Back up paid certificates first.** Download the certificate and private key files before deleting. You can't recover them from Plesk once removed.

### Troubleshooting

- **"Remove" button greyed out:** The certificate is still assigned. Unassign it first.
- **Site shows HTTPS error after removal:** Disable the HTTP-to-HTTPS redirect and clear your browser cache.
- **Certificate reappears after deletion:** The **Keep websites secured** toggle is auto-issuing a new Let's Encrypt certificate. Disable it.

### Related Guides

- [Reissue instead](/hc/help/en/articles/how-to-reissue-and-replace-an-ssl-certificate-in-plesk)
- [Install a fresh Let's Encrypt cert](/hc/help/en/articles/how-to-install-a-free-let-s-encrypt-ssl-in-plesk)
- [Check expiry first](/hc/help/en/articles/how-to-view-ssl-certificate-expiry-dates-in-plesk)