Manage CA certificates
After you create private root CAs and intermediate CAs, go back to Manage CA to keep them working and trusted over their lifetime. From Manage CA, you can:
Download or export a CA certificate or its keys, to distribute trust or to back up and migrate a CA.
Disable, enable, recertify, or replace a CA, to control issuance and renew CAs before they expire.
Revoke an intermediate CA that must no longer be trusted, and reinstate it if it was revoked with Certificate hold.
注記
Qualified Trust CAs cannot be disabled or recertified, and qualified ICAs follow different revocation rules. See About CA revocation.