Help Center/ Cloud Certificate & Manager/ SSL Certificate Manager (SCM) User Guide/ Managing SSL Certificates/ Certificate Lifecycle Management/ Revoking an SSL Certificate
Updated on 2026-10-10 GMT+08:00
View PDF
Share

Revoking an SSL Certificate

You can revoke a certificate that has been issued by a CA. A revoked certificate is no longer trusted and can no longer be used for certificate-based encryption.

If you no longer need an issued SSL certificate for security reasons or other reasons, for example, the certificate key is lost, you can revoke the certificate on the SCM console.

After a certificate is revoked, all its records, including CA records, will be cleared and cannot be restored. Therefore, exercise caution when revoking a certificate.

After a certificate is revoked, it cannot be reissued. However, if certain conditions are met, you can apply for a new certificate.

Once the second or any subsequent certificate issued under an annual subscription service is revoked, it cannot be reissued, and the subscription service will no longer generate any additional certificates.

Application Scenarios

  • You can unsubscribe from an issued SSL certificate when the following conditions are met: The certificate revocation process (not just the submission of a revocation request, but the entire process) has been completed within seven calendar days after the order is placed, and the certificate status is Revoked.
  • You can revoke an issued SSL certificate directly if it is no longer needed due to security risks or business changes.

Prerequisites

The certificate is in the Issued state.

Constraints

  • Only issued certificates can be revoked.
  • An uploaded certificate cannot be revoked.
  • A certificate in the renewal period cannot be revoked. So, a certificate cannot be revoked within one month before it expires.
  • After a certificate revocation application is submitted, it cannot be canceled. Certificate revocation does not affect the purchase of new certificates.

Procedure

  1. Log in to the CCM console.
  2. In the navigation pane on the left, choose SSL Certificate Manager > SSL Certificates.
  3. In the row containing the certificate you wish to revoke, in the Operation column, click Revoke or More > Revoke.
  4. In the dialog box displayed, enter "REVOKE" and click Submit.

    If the Certificate revoked successfully message is displayed in the upper right corner, the certificate revocation application has been submitted, and the certificate will be revoked after the application is approved by the CA.

    After a certificate revocation application is submitted, it cannot be withdrawn. Exercise caution with a certificate revocation application.

    Figure 1 Revoke Certificate

  5. (Optional) To revoke an OV or EV certificate, confirm the revocation by email.

    After you submit a certificate revocation application, the CA will send a confirmation email to the email address you provide when you apply for the certificate. Check your email and confirm the certificate revocation in a timely manner.

    After you confirm the revocation by email, the OV and EV certificates will be revoked.

How Long Does It Take to Revoke a Certificate?

A DV certificate will be revoked within one working day after you submit a certificate revocation application.

For OV and EV certificates, after you submit a certificate revocation application, the CA sends a confirmation email to the email address you provide when you apply for the certificate. The certificate will be revoked after you confirm the revocation as required in the email.

What Are the Differences Between Revoking a Certificate and Deleting a Certificate?

You can revoke or delete certificates in Huawei Cloud CCM.

The revocation or deletion of a certificate has no impact on repurchase of the certificate.

The differences are as follows:

  • Description
    • Revoking a certificate indicates invalidating an issued certificate at the CA. A revoked certificate is no longer trusted and can no longer be used for certificate-based encryption.
    • Deleting a certificate indicates deleting a certificate from Huawei Cloud. The certificate is still valid and trusted by web browsers after the deletion.
  • Constraints
    • Revoking a certificate:

      You can apply for revocation of an issued certificate only when you do not need it any more, or the private key of the certificate has been lost, or for other security reasons.

      A certificate in the renewal period cannot be revoked. So, a certificate cannot be revoked within one month before it expires.

    • Deleting a certificate:

      Only the certificates that are in the Expired, Hosted, or Issued state can be deleted from the SCM console.