diff --git a/packages/oc-schema/src/opencollection.schema.json b/packages/oc-schema/src/opencollection.schema.json
index fe48b436..79df5c89 100644
--- a/packages/oc-schema/src/opencollection.schema.json
+++ b/packages/oc-schema/src/opencollection.schema.json
@@ -262,6 +262,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the private key (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -286,6 +290,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the PKCS#12 file (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],
diff --git a/packages/oc-spec-site/src/schema.json b/packages/oc-spec-site/src/schema.json
index 1926c78a..12e93043 100644
--- a/packages/oc-spec-site/src/schema.json
+++ b/packages/oc-spec-site/src/schema.json
@@ -267,6 +267,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the private key (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "certificateFilePath", "privateKeyFilePath"],
@@ -291,6 +295,10 @@
         "passphrase": {
           "type": "string",
           "description": "Passphrase for the PKCS#12 file (optional)"
+        },
+        "disabled": {
+          "type": "boolean",
+          "description": "Disables this client certificate (optional)"
         }
       },
       "required": ["domain", "type", "pkcs12FilePath"],
diff --git a/packages/oc-types/src/config/certificates.ts b/packages/oc-types/src/config/certificates.ts
index 9d5fb684..fadbd5e2 100644
--- a/packages/oc-types/src/config/certificates.ts
+++ b/packages/oc-types/src/config/certificates.ts
@@ -8,6 +8,7 @@ export interface PemCertificate {
   certificateFilePath: string;
   privateKeyFilePath: string;
   passphrase?: string;
+  disabled?: boolean;
 }
 
 export interface Pkcs12Certificate {
@@ -15,6 +16,7 @@ export interface Pkcs12Certificate {
   type: 'pkcs12';
   pkcs12FilePath: string;
   passphrase?: string;
+  disabled?: boolean;
 }
 
 export type ClientCertificate = PemCertificate | Pkcs12Certificate;