PKI: possibility to temporarily disable a certificate

I am studying the Vault solution for our needs, and in on of our use-case we need to be able to temporarily deactivate certificates that have been issued, and of course being able to reactivate them later.

Is it possible to achieve this with Vault in any way?
There is a button to revoke a certificate, but it is clearly stipulated that it is not possible to recover it afterwards.

Many thanks