Revoking certificates

Before you begin, make sure that the CA server is configured for CRLs and that they are available.

From the CA server, open

Certification Authority

From the left panel, expand the CA, and then click

Issued Certificates

Right‑click a certificate to revoke, and then click

All Tasks

Revoke Certificate

Select a reason code and the date and time for revocation, and then click

Yes

From the left panel, right‑click

Revoked Certificates

, and then click

All Tasks

Publish

Make sure that the certificate that you revoked is in Revoked Certificates.

You can see the revoked certificate serial number in the CRL.