Skip to main content

revokeCertificate

Revokes a certificate by its SHA1 fingerprint. The certificate must be in an active state.

revokeCertificate(
  fingerprint: ID!
  certificateAuthorityAccountId: UUID
  revocationReason: RevocationReason!
  revocationComment: String
): Certificate

Arguments​

revokeCertificate.fingerprint ● ID! non-null scalar​

The SHA1 fingerprint of the certificate to revoke.

revokeCertificate.certificateAuthorityAccountId ● UUID scalar​

Optional UUID of the certificate authority account. Required when the certificate was issued by multiple CAs.

revokeCertificate.revocationReason ● RevocationReason! non-null enum​

The reason for revoking the certificate (e.g., KEY_COMPROMISE, CA_COMPROMISE, AFFILIATION_CHANGED).

revokeCertificate.revocationComment ● String scalar​

An optional human-readable comment explaining why the certificate is being revoked.

Type​

Certificate object​

Certificate represents a managed certificate, including its metadata, lifecycle state, cryptographic details, and relationships to certificate authorities, applications, and cloud installations.