Revoke and reinstate a CA
Revoke an intermediate CA when it must no longer be trusted. Revocation requires approval from a second administrator and is permanent unless the CA was revoked with the reason Certificate hold, in which case you can reinstate (unrevoke) it.
참고
Revocation reports the CA as no longer trusted. If you only need to pause issuance, Disable a CA instead.