Certificate Revocation - dogtagpki/pki GitHub Wiki
This page describes the process to revoke a certificate. The operation must be done by a CA agent.
To revoke a certificate permanently, execute the following command:
$ pki <agent authentication> ca-cert-revoke <certificate ID>
To revoke a certificate temporarily (i.e. hold), execute the following command:
$ pki <agent authentication> ca-cert-hold <certificate ID>
To release a certificate that has been held:
$ pki <agent authentication> ca-cert-release-hold <certificate ID>