Revoking a certificate

Use the /revoke resource to revoke a valid certificate.

Service endpoints

Pilot

https://pilot-certmanager-webservices.websecurity.symantec.com/vswebservices/rest/services/revoke

Production

https://certmanager-webservices.websecurity.symantec.com/vswebservices/rest/services/revoke

Parameters

Table: Revocation request parameters

Name	Data type	Required	Max Length	Description
certSerial	Text	Y	32	The certificate serial number. Must be 32 bytes.
reason	Text	Y	64	Use one of the following reasons: Key compromise CA compromise Affiliation changed Superseded Cessation of operation Certificate hold Remove from CRL Privilege withdrawn AA compromise Unspecified.
challenge	Text	N	32	The original challenge phrase for the certificate.

Name

Data type

Required

Max Length

Description

certSerial

Text

The certificate serial number. Must be 32 bytes.

reason

Text

Use one of the following reasons:

Key compromise
CA compromise
Affiliation changed
Superseded
Cessation of operation
Certificate hold
Remove from CRL
Privilege withdrawn
AA compromise
Unspecified.

challenge

Text

The original challenge phrase for the certificate.

Sample request (POST)

java

POST https://certmanager-webservices.websecurity.symantec.com
/vswebservices/rest/services/revoke HTTP/1.0
Content-Type: application/x-www-form-urlencoded
User-Agent: ACME Security Services
Host: certmanager-webservices.websecurity.symantec.com
Content-Length: 68

Sample response

The revocation response returns a status code and message code that indicates success or failure. The following is a sample of a successful revocation response:

java

HTTP/1.0 200 OK
Content-Type: text/xml
Server: Apache/2.1
Date: Mon, 8 Dec 2008 23:22:49 GMT
Content-Length: 112
Connection: Close

<Response xmlns="urn:symantec:api">
 <StatusCode>0x00</StatusCode>
  <Message>success</Message>
</Response>