Private CA Statuses

PCA manages the private CA lifecycle by status. Figure 1 shows how statuses are determined for private CAs. A private CA in different statuses has different functions, as described in Table 1.

Figure 1 CA lifecycle

**Table 1** Functions and statuses of private CAs
Status	Issuing a Certificate	Revoking a Certificate	Exporting a Certificate	Importing a Certificate	Exporting a CSR	CA Quota Used	Billed
Pending activation	No	No	No	Yes	Yes	Yes	No
Activated	Yes	Yes	Yes	No	No	Yes	Yes
Disabled	No	Yes	Yes	No	No	Yes	Yes
Pending deletion	No	No	No	No	No	Yes	No
Expired	No	No	Yes	No	No	Yes	Yes
Revoked	No	No	No	No	No	Yes	No

Only subordinate CAs can be in the Pending activation or Revoked status. Subordinate CAs in the Pending activation status are not billed. A root CA will never be in the Revoked status as it is a self-signed certificate.
If you cancel the deletion of a private CA in the Pending deletion status, it will be billed for the actual pending deletion period.
Expired private CAs still use the quota of private CAs so they will be billed until they are completely deleted. If you no longer use a private CA, delete it in a timely manner to avoid money waste.