Moving a trusted CA certificate to pending CA certificate
In the web UI, go to Administration > Certificate Management > Certificates. In the native UI, go to Tools > Certificate Manager or click the Certificates button in the
tool bar.
Right-click the trusted intermediate CA certificate or root CA certificate in
the tree pane and select Move > Trusted > Pending CA Certificate.
Click Yes.
The CA certificate is moved into the pending store.