---
title: "ezgh private-ca certificate revoke"
description: "Revoke a certificate."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ezghcloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ezgh private-ca certificate revoke

{/* Generated by ezgh-cli's internal/tools/clidocs from the ezgh command tree. Don't edit: change the command's help in ezgh-cli and regenerate. */}

```sh
ezgh private-ca certificate revoke <id> --reason r [flags]
```

Revoke a certificate: its CA's CRL lists it within 5 minutes and OCSP answers "revoked" within a minute, so clients that check reject it. `--reason` is unspecified, keyCompromise (which also destroys a key EZGH generated), affiliationChanged, superseded or cessationOfOperation. Revocation is final. It asks first on a terminal; `--yes` confirms otherwise.

Part of [`ezgh private-ca certificate`](/cli/reference/private-ca-certificate).

## Flags

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--reason` | string | `unspecified` | why: unspecified, keyCompromise, affiliationChanged, superseded, cessationOfOperation |
| `-y`, `--yes` | boolean |  | don't ask for confirmation |

This command also takes the [global flags](/cli/reference#global-flags).

Source: https://docs.ezghcloud.com/cli/reference/private-ca-certificate-revoke/index.mdx