---
title: "PATCH /reject-certificate-transfer/{certificateId}"
method: PATCH
path: "/reject-certificate-transfer/{certificateId}"
---

# PATCH /reject-certificate-transfer/{certificateId}

`PATCH /reject-certificate-transfer/{certificateId}`

Rejects a pending certificate transfer. After IoT rejects a certificate transfer, the certificate status changes from **PENDING\_TRANSFER** to **INACTIVE**.

To check for pending certificate transfers, call ListCertificates to enumerate your certificates.

This operation can only be called by the transfer destination. After it is called, the certificate will be returned to the source's account in the INACTIVE state.

Requires permission to access the [RejectCertificateTransfer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Path parameters

- `certificateId` string, required

## Request body

- object
  - `rejectReason` string — The reason the certificate transfer was rejected.

## Response `200`

Success

## Other responses

- `480` — ResourceNotFoundException
- `481` — TransferAlreadyCompletedException
- `482` — InvalidRequestException
- `483` — ThrottlingException
- `484` — UnauthorizedException
- `485` — ServiceUnavailableException
- `486` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)