====== Discard certificates ======

===== Synopsis =====

    certfree [--subject <subject>]

===== Examples =====

=== Discard all non-permanent certificates ===

    certfree

=== Discard any certificates matching the subject "forum.ipxe.org" ===

    certfree --subject forum.ipxe.org

===== Description =====

Discard the specified certificates from the certificate store.  If no subject name is specified, iPXE will discard all stored certificates.

===== See also =====

  * ''[[:cmd:certstat]]''
  * ''[[:cmd:certstore]]''
  * iPXE [[:crypto|cryptography]] guide
  * [[:cmd|List of all iPXE commands]]

===== Build options =====

This command is available only when the build option ''[[:buildcfg:CERT_CMD]]'' is enabled.

===== Notes =====

The ''%%--subject%%'' option will match against the certificate's Common Name and any Subject Alternative Names, if present.

Certificates that were [[:crypto#embedded_certificates|embedded]] into iPXE at build time cannot be discarded.