---
title: "Retire the intermediate tenant certificate"
method: PATCH
path: "/v2/CertificateAuthority/RetireTenantIssuer"
tags: ["Certificate Authority Issuers"]
---

# Retire the intermediate tenant certificate

`PATCH /v2/CertificateAuthority/RetireTenantIssuer`

## Request

- Base URL: `https://api.byndid.com`
- URL: `https://api.byndid.com/v2/CertificateAuthority/RetireTenantIssuer`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/beyondidentity/apis/beyond-identity-secure-workforce-api/docs/v2/CertificateAuthority/RetireTenantIssuer/patch.ts> (a function with typed inputs; its response is checked against the schema)

This retires the tenant level intermediate certificate. This is the
certificate that currently being used to sign new certificates. Retiring a
certificate means that it will no longer be used for signing new
certificates without revoke it, and without invalidating a certificate chain.
A new certificate will be issued when the next credential is issued.

## Request body

- object: An empty object body

## Response `200`

This indicates that the certificate was retired

## Other responses

- `400`: Bad request.
- `401`: Unauthorized.
- `403`: Forbidden.
- `404`: Not found.
- `500`: Server error.

---

[API](https://skmtc.dev/beyondidentity/apis/beyond-identity-secure-workforce-api.md) - [All operations](https://skmtc.dev/beyondidentity/apis/beyond-identity-secure-workforce-api/llms.txt) - [OpenAPI document](https://skmtc.dev/beyondidentity/apis/beyond-identity-secure-workforce-api/revisions/562e14b2e4ba?raw)