Skip to main content

Revoke a certificate (admin only)

POST 
/v2/admin/certificates/:id/revoke

Marks a certificate revoked. Idempotent — re-revoking is a no-op. After revocation, GET /v2/certificates/{id}/verify returns {valid: false, revoked: true} even though the signature still verifies; a revoked cert is not a valid attestation.

Reasons we'd actually use: customer disputes the verification, GDPR data-deletion request, discovered fraud upstream.

Request​

Responses​

Certificate revoked