Revoke a certificate
Disables the running MQ credential before recording revocation. The request fails if runtime enforcement is unavailable. Repeated requests preserve the original revocation timestamp.
Authorizations
JWT bearer token issued by the identity provider.
Headers
Idempotency key for this state-changing request (required, max 255 characters).
255Request correlation identifier. Generated when omitted.
Path Parameters
Certificate id.
Response
OK
BACEN certificate-authority code (C10/C12 on the SFN wire): 1 SPB-Serpro, 2 SPB-Certisign, 3 Pessoas Fisicas, 4 SPB-Serasa, 5 SPB-CAIXA, 6 SPB-Valid, 7 SPB-Soluti. Derived from the certificate's own ISSUER block (OU=CSPB-N), never supplied. sfnCertificateId is unique only WITHIN this authority, so the two together are the identity.
Whole days until expiry (0 the day it lapses, negative once expired). Always present — a real 0 is the most urgent operator signal.
Certificate id.
Validity end (expiry).
Exact 64-hex C11 identity used on the SFN wire: the hex encoding of the 32-byte slot, whose content is the certificate serial in uppercase ASCII hex, right-aligned and zero-left-padded. No ISPB. Unique only within authorityCode.
Certificate subject DN.
"CN=46026562, OU=SILOC"
Opaque reference to the private key in the FI's custody; the key itself is never stored here.
Validity start.
Revocation time. Omitted while the certificate is active.
Certificate serial number.

