untrusted comment: verify with openbsd-71-base.pub
RWR2eHwZTOEiTdmVXXYVmk8q0UIATCcINUhR/gTJqfluQtLVeq19D79OVRF0j35BCHRaqDDECFVax2a5gmthOXOn/K3Wmm96DgM=

OpenBSD 7.1 errata 017, December 16, 2022:

Removing a domain can result in an out-of-bounds write in acme-client(8).

Apply by doing:
    signify -Vep /etc/signify/openbsd-71-base.pub -x 017_acme.patch.sig \
        -m - | (cd /usr/src && patch -p0)

And then rebuild and install acme-client
    cd /usr/src/usr.sbin/acme-client
    make obj
    make
    make install

Index: usr.sbin/acme-client/revokeproc.c
===================================================================
RCS file: /cvs/src/usr.sbin/acme-client/revokeproc.c,v
diff -u -p -r1.19 revokeproc.c
--- usr.sbin/acme-client/revokeproc.c	22 Nov 2021 08:26:08 -0000	1.19
+++ usr.sbin/acme-client/revokeproc.c	14 Dec 2022 17:25:11 -0000
@@ -239,6 +239,7 @@ revokeproc(int fd, const char *certfile,
 				goto out;
 			}
 			force = 2;
+			continue;
 		}
 		if (found[j]++) {
 			if (revocate) {