---
title: "ezgh private-ca ca revoke"
description: "Revoke a subordinate certificate authority."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh private-ca ca revoke

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh private-ca ca revoke <ca> --reason r [flags]
```

Revoke a subordinate certificate authority through its parent (which needs certificates.certificateAuthorities.revoke): its parent lists it on its CRL and OCSP, and it's disabled for good, so clients that check reject every certificate under it. Roots aren't revoked: disable or delete them. `--reason` is unspecified, keyCompromise, affiliationChanged, superseded or cessationOfOperation. Revocation is final. It asks first on a terminal; `--yes` confirms otherwise.

Part of [`ezgh private-ca ca`](/cli/reference/private-ca-ca).

## Flags

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--reason` | string | `unspecified` | why: unspecified, keyCompromise, affiliationChanged, superseded, cessationOfOperation |
| `-y`, `--yes` | boolean |  | don't ask for confirmation |

This command also takes the [global flags](/cli/reference#global-flags).

Source: https://docs.ezghcloud.com/cli/reference/private-ca-ca-revoke/index.mdx