Skip to main content

Submit a request to revoke a single certificate on an order

By default, if you revoke the primary certificate on a certificate order, you also revoke the order and all associated certificates, including reissues and duplicates.

What if I only need to revoke one certificate on the order?

To revoke a single certificate on a certificate order instead of all certificates, you need the serial number of the certificate you want to revoke.

What if I don't want to revoke the order?

To revoke all the certificates on an order, but leave the order active, you need the serial number for each certificate on the order. Revoking the certificates instead of the order allows you to continue reissuing certificates on the order.

Before you begin

  • Get the serial number of the certificate you want to revoke.

  • Make sure the certificate is no longer protecting your websites.

    Remember, revoked certificate warnings prevent visitors from accessing a site and affect customer trust.

Warning

Items to note about revoking a certificate

  • A revoked certificate is invalid and can’t be restored; in other words, it can’t be undone.

  • A revoked certificate loses remaining renewal time and can't be reissued or duplicated.

  • A website with a revoked certificate may show trust warnings to visitors.

Submit a request to revoke a single certificate

  1. In CertCentral, in the left main menu, go to Certificates > Orders.

  2. On the Orders page, in the Search box, enter the certificate's serial number and select Go.

  3. In the Certificate id column, select the Quick View link.

  4. In the side panel on the right, in the Actions menu, select Revoke certificate.

  5. On the Request to Revoke Certificate page, in the Why do you want to revoke this certificate menu, select the reason for revoking the certificates:

    • Key compromise - My certificate's private key was lost, stolen, or otherwise compromised.

    • Cessation of operation - I no longer use or control the domain or email address associated with the certificate or no longer use the certificate.

    • Affiliation change - The name or any other information regarding my organization changed.

    • Superseded - I have requested a new certificate to replace this one.

    • Unspecified - None of the reasons above apply.

  6. Administrators only: Revoke without administrator approval.

    As an admin, you can revoke the certificate without admin approval. To do this, under Do you want to revoke without additional admin approval, select Revoke this certificate immediately.

  7. In the Comment to admin box, provide more information to the approving admin.

  8. Once ready, select Request revocation.

What's next

  • Once a CertCentral account administrator approves your revocation request DigiCert revokes the certificate.

  • Administrators only: If you selected Revoke this certificate immediately, DigiCert revokes the certificate now.