Detach a managed certificate from its renewal profile
DELETE/api/v1/workspaces/:id/certops/certificates/:certId/profile
Nulls the certificate's profile link, writes the audit record, and cancels any outstanding profile-derivation intents, all in one transaction: without the cancellation, an in-flight setup could re-link the certificate moments after the operator detached it.
The profile row itself is never deleted, because one profile can cover several certificates.
Gated like the profile PATCH: a session user with
certops.renewal_profile.manage, since both change what a privileged
agent will run on a host.
Request
Responses
- 200
- 401
- 403
- 404
- 422
- 429
- 500
Certificate detached from its renewal profile
Unauthorized
Not a session user, or the session user lacks certops.renewal_profile.manage
CertOps is disabled or the certificate was not found in this workspace
The certificate is not linked to a renewal profile, so there is nothing to detach
The workspace API rate limiter rejected the request
Internal server error