DeleteCertificate

CertificateManagement CSMS->CS OCPP 2.0.1

Sent by the CSMS to remove a specific certificate from the Charging Station's certificate store.

Quick Reference

Required Fields

certificateHashData CertificateHashDataType

Hash data identifying the certificate to delete

certificateHashData.hashAlgorithm HashAlgorithmEnumType

Hash algorithm used: SHA256, SHA384, or SHA512

certificateHashData.issuerNameHash string(128)

Hash of the issuer's distinguished name

certificateHashData.issuerKeyHash string(128)

Hash of the issuer's public key

certificateHashData.serialNumber string(40)

Certificate serial number

Example Payload

{
  "certificateHashData": {
    "hashAlgorithm": "SHA256",
    "issuerNameHash": "a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2",
    "issuerKeyHash": "b4c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2",
    "serialNumber": "01A2B3C4"
  }
}

Example Full Frame

[
  2,
  "msg-001",
  "DeleteCertificate",
  {
    "certificateHashData": {
      "hashAlgorithm": "SHA256",
      "issuerNameHash": "a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2",
      "issuerKeyHash": "b4c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2",
      "serialNumber": "01A2B3C4"
    }
  }
]

Format: [MessageType, MessageId, Action, Payload]

Open in Builder Go to Validator

Overview

DeleteCertificate removes a specific certificate from the Charging Station’s trust store by identifying it via its cryptographic hash data.

Expected Response

status: Accepted, Failed, or NotFound

Usage Notes

Use GetInstalledCertificateIds first to discover the hash data of installed certificates
Deleting the active CSMS root certificate may disconnect the station

Testing Tips

Install a certificate, get its hash via GetInstalledCertificateIds, then delete it and verify it’s gone
Test deleting a non-existent certificate and verify NotFound

Common Errors

`GenericError`

Cause: Certificate not found by the given hash data

Solution: Charging Station responds with NotFound. Use GetInstalledCertificateIds to find the correct hash data.