To delete a certificate the command
DELKEYS pattern
is used. To allow multiple patterns (which are ORed) quoting is required: Spaces are to be translated into "+" or into "%20"; in turn this requires that the usual escape quoting rules are done.
The certificates must be specified unambiguously otherwise an error is returned.