diff --git a/packages/fxa-auth-server/config/index.ts b/packages/fxa-auth-server/config/index.ts
index a7e6458c9c5..94d6456a757 100644
--- a/packages/fxa-auth-server/config/index.ts
+++ b/packages/fxa-auth-server/config/index.ts
@@ -2281,12 +2281,6 @@ const convictConf = convict({
       format: String,
     },
   },
-  certificateSignDisableRolloutRate: {
-    default: 0,
-    doc: 'Rollout rate for disabling certificate signing, in the range 0 .. 1',
-    env: 'CERTIFICATE_SIGN_DISABLE_ROLLOUT_RATE',
-    format: Number,
-  },
   cms: {
     enabled: {
       default: false,
diff --git a/packages/fxa-auth-server/lib/metrics/events.js b/packages/fxa-auth-server/lib/metrics/events.js
index b276932afa4..74d5693fe87 100644
--- a/packages/fxa-auth-server/lib/metrics/events.js
+++ b/packages/fxa-auth-server/lib/metrics/events.js
@@ -59,7 +59,6 @@ const IGNORE_ROUTE_FLOW_EVENTS_FOR_PATHS = new Set([
   '/account/devices',
   '/account/profile',
   '/account/sessions',
-  '/certificate/sign',
   '/password/forgot/status',
   '/recovery_email/status',
   '/jwks',
diff --git a/packages/fxa-auth-server/lib/routes/oauth/token.js b/packages/fxa-auth-server/lib/routes/oauth/token.js
index be5b5905ab0..1739ca7d680 100644
--- a/packages/fxa-auth-server/lib/routes/oauth/token.js
+++ b/packages/fxa-auth-server/lib/routes/oauth/token.js
@@ -904,7 +904,7 @@ module.exports = ({ log, oauthDB, db, mailer, devices, statsd, glean }) => {
           ) {
             // For desktop, the 'service' parameter for this event gets
             // special-cased to 'sync' so that it matches its pre-oauth
-            // `/certificate/sign` event.
+            // `/certificate/sign` event. (Note: `/certificate/sign` is now removed.)
             // ref: https://github.com/mozilla/fxa/pull/6581#issuecomment-702248031
             // Otherwise, for mobile browsers, just use the existing client ID
             // to service name mapping used in the metrics code (see the