Deleting a Certificate Authority
Delete a certificate authority (CA).
You can only delete a CA version with a rotation state of deprecated. For a deprecated version to exist, a current version and a previous version must also exist. Unless you want to delete a CA entirely, you must maintain at least one version of the CA. Furthermore, the CA can't have any associations, current issued certificates, or subordinate CAs. You must delete all associations, certificates, and subordinate CAs issued by a given parent CA before you can delete the parent CA.
When you delete a CA, the deletion doesn't happen immediately. By default, a CA is permanently deleted 30 days after you schedule it for deletion. At minimum, the CA continues to exist for another seven days. CAs pending deletion count against their own service limits and are subject to restrictions on the reuse of a CA display name.