Skip to main content

Revoke all certificates on an order

Revoke the entire certificate order and all associated certificates including reissues and duplicates.

Before you begin

  • Confirm you have permission to revoke certificates in your account.

  • Confirm that all certificates on the order have been replaced before submitting the revocation request.

  • If revoking due to private key compromise, consider submitting a request to DigiCert's Certificate Problem Reporting page to revoke any valid DigiCert-issued certificates linked to the compromised key.

Submit a revocation request

For Enterprise, Partner, and Legacy accounts:

  1. In the CertCentral main menu, go to Certificates > Orders.

  2. Select the certificate order to revoke.

  3. From the Order actions menu, select Revoke all certificates.

  4. On the Request to Revoke Certificate page, select the revocation reason:

    • Key compromise: The certificate's private key was lost, stolen, or compromised.

    • Cessation of operation: The domain or email address associated with the certificate is no longer used or controlled.

    • Affiliation change: The organization name or other information changed.

    • Superseded: A new certificate has been requested to replace this one.

    • Unspecified: None of the above reasons apply.

  5. Add a comment if required.

  6. Select Request revocation.

For Subscription accounts:

  1. In the CertCentral main menu, go to My Digital Trust Products > Certificates.

  2. Select the certificate order to revoke.

  3. From the Order actions menu, select Revoke all certificates.

  4. On the Request to Revoke Certificate page, select the revocation reason:

    • Key compromise: The certificate's private key was lost, stolen, or compromised.

    • Cessation of operation: The domain or email address associated with the certificate is no longer used or controlled.

    • Affiliation change: The organization name or other information changed.

    • Superseded: A new certificate has been requested to replace this one.

    • Unspecified: None of the above reasons apply.

  5. Add a comment if required.

  6. Select Request revocation.

Notice

Administrators can revoke a certificate without additional administrator approval. Under Do you want to revoke without additional admin approval, select Revoke this certificate immediately to bypass the approval step.

After submission, the revocation request remains pending until an administrator approves it. DigiCert revokes all certificates on the order after the revocation request is approved.

What's next

Revoke a single certificate on an order to revoke one certificate while keeping the order active