Revoke and reinstate a CA

Revoke an intermediate CA when it must no longer be trusted. Revocation requires approval from a second administrator and is permanent unless the CA was revoked with the reason Certificate hold, in which case you can reinstate (unrevoke) it.