nitpick: "in order that the existing certificate **remains** known **to Foreman** and can be revoked". Otherwise :+1: