Deleting a Certificate Authority Version
Delete a certificate authority (CA) version when you no longer need it.
You can only delete a CA version with a rotation state of deprecated. For a deprecated version to exist, a current version and a previous version must also exist. Unless you want to delete a CA entirely, you must maintain at least one version of the CA. When you delete a CA version, the deletion doesn't happen immediately. By default, a CA is permanently deleted 30 days after you schedule it for deletion. At minimum, the CA continues to exist for another seven days.