v1

latestOpenAPI 3.0.12026-07-177949123.5 KB

v1/certificate

Revokes the specified certificate

Revokes the specified certificate, changes revocation reason for an already revoked certificate, sets invalidity or revocation date

put/v1/certificate/{issuer_dn}/{certificate_serial_number}/revoke

Path parameters

issuer_dnstring required

Subject DN of the issuing CA

certificate_serial_numberstring required

Hex serial number (without prefix, e.g. '00')

Query parameters

reasonstring

Valid RFC5280 reason. One of NOT_REVOKED, UNSPECIFIED ,KEY_COMPROMISE, CA_COMPROMISE, AFFILIATION_CHANGED, SUPERSEDED, CESSATION_OF_OPERATION, CERTIFICATE_HOLD, REMOVE_FROM_CRL, PRIVILEGES_WITHDRAWN, AA_COMPROMISE

Only KEY_COMPROMISE is allowed for new revocation reason if revocation reason is to be changed.

datestring

ISO 8601 Date string, eg. '2018-06-15T14:07:09Z'

invalidity_datestring

ISO 8601 Date string, eg. '2018-06-15T14:07:09Z'. Will be ignored with revocation reason REMOVE_FROM_CRL

Response

Successful operation

issuer _distinguished _namestring

hex _serial _numberstring

rfc5280 revokation reasonstring

revokation datestring date-time

invalidity datestring date-time

messagestring

revokedboolean

Example response

{
  "issuer _distinguished _name": "CN=ExampleCA",
  "hex _serial _number": "1234567890ABCDEF",
  "rfc5280 revokation reason": "KEY_COMPROMISE",
  "revokation date": "1970-01-01T00:00:00Z",
  "invalidity date": "1970-01-01T00:00:00Z",
  "message": "Successfully revoked"
}