--- title: Revoke Client Certificate --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Client Certificates](https://developers.cloudflare.com/api/go/resources/client_certificates) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Revoke Client Certificate client.ClientCertificates.Delete(ctx, clientCertificateID, body) (\*[ClientCertificate](), error) DELETE/zones/{zone\_id}/client\_certificates/{client\_certificate\_id} Set a API Shield mTLS Client Certificate to pending\_revocation status for processing to revoked status. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `SSL and Certificates Write` ##### ParametersExpand Collapse clientCertificateID string Client Certificate Tag maxLength36 minLength36 [Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20delete%20%3E%20(params)%20default%20%3E%20(param)%20client_certificate_id%20%3E%20(schema)>)
body ClientCertificateDeleteParams ZoneID param.Field\[string] Identifier. maxLength32 Link to this property
[Link to this property](<#(resource)%20client_certificates%20%3E%20(method)%20delete%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type ClientCertificate struct{…} ID stringOptional Client Certificate Tag maxLength36 minLength36 Link to this property Certificate stringOptional The Client Certificate PEM. Link to this property
CertificateAuthority ClientCertificateCertificateAuthorityOptional Certificate Authority used to issue the Client Certificate. ID stringOptional Link to this property Name stringOptional Link to this property
Link to this property CommonName stringOptional Common Name of the Client Certificate. Link to this property Country stringOptional Country, provided by the CSR. Link to this property Csr stringOptional The Certificate Signing Request (CSR). Must be newline-encoded. Link to this property ExpiresOn stringOptional Date that the Client Certificate expires. Link to this property FingerprintSha256 stringOptional Unique identifier of the Client Certificate. Link to this property IssuedOn stringOptional Date that the Client Certificate was issued by the Certificate Authority. Link to this property Location stringOptional Location, provided by the CSR. Link to this property Organization stringOptional Organization, provided by the CSR. Link to this property OrganizationalUnit stringOptional Organizational Unit, provided by the CSR. Link to this property SerialNumber stringOptional The serial number on the created Client Certificate. Link to this property Signature stringOptional The type of hash used for the Client Certificate.. Link to this property Ski stringOptional Subject Key Identifier. Link to this property State stringOptional State, provided by the CSR. Link to this property
Status ClientCertificateStatusOptional Client Certificates may be active or revoked, and the pending\_reactivation or pending\_revocation represent in-progress asynchronous transitions. One of the following: const ClientCertificateStatusActive ClientCertificateStatus = "active" Link to this property const ClientCertificateStatusPendingReactivation ClientCertificateStatus = "pending\_reactivation" Link to this property const ClientCertificateStatusPendingRevocation ClientCertificateStatus = "pending\_revocation" Link to this property const ClientCertificateStatusRevoked ClientCertificateStatus = "revoked" Link to this property
Link to this property ValidityDays int64Optional The number of days the Client Certificate will be valid after the issued\_on date. Link to this property
[Link to this property](<#(resource)%20client_certificates%20%3E%20(model)%20client_certificate%20%3E%20(schema)>) ### Revoke Client Certificate Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/client_certificates" "github.com/cloudflare/cloudflare-go/option" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) clientCertificate, err := client.ClientCertificates.Delete( context.TODO(), "0d89c70d-ad9f-4843-b99f-6cc0252067e9", client_certificates.ClientCertificateDeleteParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), }, ) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", clientCertificate.ID) } ``` 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDmDCCAoC...dhDDE\n-----END CERTIFICATE-----", "certificate_authority": { "id": "568b6b74-7b0c-4755-8840-4e3b8c24adeb", "name": "Cloudflare Managed CA for account" }, "common_name": "Cloudflare", "country": "US", "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----", "expires_on": "2033-02-20T23:18:00Z", "fingerprint_sha256": "256c24690243359fb8cf139a125bd05ebf1d968b71e4caf330718e9f5c8a89ea", "issued_on": "2023-02-23T23:18:00Z", "location": "Somewhere", "organization": "Organization", "organizational_unit": "Organizational Unit", "serial_number": "3bb94ff144ac567b9f75ad664b6c55f8d5e48182", "signature": "SHA256WithRSA", "ski": "8e375af1389a069a0f921f8cc8e1eb12d784b949", "state": "CA", "status": "active", "validity_days": 3650 } } ``` ##### Returns Examples 200 example ``` { "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "success": true, "result": { "id": "0d89c70d-ad9f-4843-b99f-6cc0252067e9", "certificate": "-----BEGIN CERTIFICATE-----\nMIIDmDCCAoC...dhDDE\n-----END CERTIFICATE-----", "certificate_authority": { "id": "568b6b74-7b0c-4755-8840-4e3b8c24adeb", "name": "Cloudflare Managed CA for account" }, "common_name": "Cloudflare", "country": "US", "csr": "-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----", "expires_on": "2033-02-20T23:18:00Z", "fingerprint_sha256": "256c24690243359fb8cf139a125bd05ebf1d968b71e4caf330718e9f5c8a89ea", "issued_on": "2023-02-23T23:18:00Z", "location": "Somewhere", "organization": "Organization", "organizational_unit": "Organizational Unit", "serial_number": "3bb94ff144ac567b9f75ad664b6c55f8d5e48182", "signature": "SHA256WithRSA", "ski": "8e375af1389a069a0f921f8cc8e1eb12d784b949", "state": "CA", "status": "active", "validity_days": 3650 } } ```