Is the only prerequisite for revoking a certificate is to have the private key?
At least from letsencrypt, it seems you also need the original account cert or by re-validating ownership of the domain
At least from letsencrypt, it seems you also need the original account cert or by re-validating ownership of the domain
Yes. Knowing the key is evidence of key compromise, key compromise means the cert must be revoked within 24 hours of the CA learning about it.