See below for revoking the validity of a certificate before the certificate expiration date.

To revoke a certificate

1. Log in as an administrator with one of the following roles:
   • The global_admin role.
   • The <ca>_admin role for the certificate authority that issued the certificate.
   • A Certificate Role with permission to revoke certificates for the same certificate authority and certificate profile.
2. Go to Control > Certificates.
3. In the main grid, slick Select Action > Revoke for the certificate.

4. In the Revocation Reason list of the Revoke dialog, select the revocation reason. 

   The ECS Certificate Authorities do not support the On Hold revocation reason.

5. In the Comment field, add an optional comment on the revocation reason.
6. Click Save.