# Wrong SSL certificates removed

**Project:** Bugs | **Board:** Live | **Votes:** 2
**URL:** https://roadmap.ploi.io/projects/7-bugs/items/1102-wrong-ssl-certificates-removed

---

I ran into a bug where my SSL certificates disappeared.

After migrating a bunch of websites to Ploi and setting up their SSL certificates I noticed near the end that there was support for requesting Wildcard domains. So most websites already had active certificates for `example.com,www.example.com`. I ended up requesting new wildcard certificates for all those websites and once they were active I deleted the previously added certificates.

It seems that the certificates for `example.com,www.example.com` and `example.com,*.example.com` are stored at the same path, so when you request a new certificate it just overwrites the previous one. When deleting either of them the Ploi control panel still shows you have an active certificate even though the actual certificate has been removed from the server.

Steps to reproduce:

- Request SSL certificate for a site `example.com,www.example.com`
- Request a new SSL certificate for the same site `example.com,*.example.com`
- Delete certificate of `example.com,www.example.com` from the Ploi control panel
- Attempt to restart nginx or check config with `nginx -t`

