---
title: Revoke a client certificate · Cloudflare SSL/TLS docs
description: You can revoke a client certificate you previously generated with
  the default Cloudflare Managed CA.
lastUpdated: 2024-08-13T19:56:56.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/ssl/client-certificates/revoke-client-certificate/
  md: https://developers.cloudflare.com/ssl/client-certificates/revoke-client-certificate/index.md
---

You can revoke a client certificate you previously generated with the default [Cloudflare Managed CA](https://developers.cloudflare.com/ssl/client-certificates/).

It is not possible to permanently delete client certificates generated with the default Cloudflare Managed CA. Once revoked, these client certificates will still be listed in **SSL/TLS > Client Certificates**, and can be restored at any time.

## Steps

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account and application.
2. Go to **SSL** > **Client Certificates**.
3. Select the certificate you want to revoke.
4. Select **Revoke** and confirm the operation.

Important

After revoking a certificate, you must update any mTLS rules that check for the presence of a client certificate so that they block all requests that include a revoked certificate.

For more information, refer to [Check for revoked certificates](https://developers.cloudflare.com/api-shield/security/mtls/configure/#check-for-revoked-certificates).
