Actions for certificates

The following table summarizes actions on certificates and the required status to perform these actions:

Table 1. Summary of actions to perform and required status to do so
Action	Required status of certificate	Who performs action
Renew	`Active`	End user
Resume	`Suspended`	Administrator
Revoke	`Active` or `Suspended`	End user or administrator
Suspend	`Active`	End user or administrator
Delete	All statuses (`Active`, `Expired`, `Suspended`, `Revoked`, or `Revoked, Expired`)	Administrator
Enable automatic renewal	`Active or Active,AutoRenewDisabled`	Administrator
Disable automatic renewal	`Active or Active,AutoRenew`	Administrator
Change requester email	All statuses Note: This action applies only to certificates for which PKI Services generated the key pair.	Administrator

Note: You can resume (reactivate) a suspended certificate, or permanently revoke it, if the certificate has not yet expired and the suspension grace period has not elapsed. If the grace period has elapsed, the certificate is permanently revoked the next time certificate revocation lists (CRLs) are issued.