A certificate shows as revoked and the customer is asking why

Certificate status is derived at the moment the page is rendered, from the state of the order behind it, rather than stored and updated separately. A refunded or cancelled order therefore shows its certificate as revoked immediately and automatically, with no action needed from you. The flip side is that you cannot revoke a certificate by editing it: change the order, and the certificate follows.