Note: Before you begin, make sure that the CA server is configured for CRLs and that they are available.
From the CA server, open Certification Authority.
From the left panel, expand the CA, and then click Issued Certificates.
Right‑click a certificate to revoke, and then click All Tasks > Revoke Certificate.
Select a reason code and the date and time for revocation, and then click Yes.
From the left panel, right‑click Revoked Certificates, and then click All Tasks > Publish.
Note: Make sure that the certificate that you revoked is in Revoked Certificates.
You can see the revoked certificate serial number in the CRL.