After upgrading it to 9.4 (CR10), we are not able to revoke any certificates within the Internal Identity Provider.
API Gateway: 9.4
This a known bug in 9.4. It has been fixed in GW10.
The workaround is to use Restman to delete the certificates (DELETE 1.0/users/{userID}/certificate).