---
title: "POST /api/v1/pki/certificates/{serialNumber}/revoke"
method: POST
path: "/api/v1/pki/certificates/{serialNumber}/revoke"
tags: ["PKI Certificates"]
---

# POST /api/v1/pki/certificates/{serialNumber}/revoke

`POST /api/v1/pki/certificates/{serialNumber}/revoke`

Revoke

## Path parameters

- `serialNumber` string, required

## Request body

- object
  - `revocationReason` 'UNSPECIFIED' | 'KEY_COMPROMISE' | 'CA_COMPROMISE' | 'AFFILIATION_CHANGED' | 'SUPERSEDED' | 'CESSATION_OF_OPERATION' | 'CERTIFICATE_HOLD' | 'PRIVILEGE_WITHDRAWN' | 'A_A_COMPROMISE', required — The reason for revoking the certificate.

## Response `200`

Default Response

- object
  - `message` string, required
  - `serialNumber` string, required — The serial number of the revoked certificate.
  - `revokedAt` string, date-time, required — The date and time when the certificate was revoked.

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/f10a4f8c1d41/schema)