When should a certificate be revoked?
The revocation of a certificate must take place when any change in the status of a certificate leads to its loss of validity before its expiry date. The possible reasons for revocation are:
– At the request of the Certificate Holder itself or of the Subscriber Entity with which the Certificate Holder has a corporate or legal or voluntary representation relationship.
– Incorrect data.
– Change in the data or circumstances of the holder or the Entity.
– Compromise of the password (theft, loss…).
– Loss of control of the password activation data (PIN).
– Other causes contemplated in the CPS.
Who can request the revocation of a certificate?
– The Certificate Holder.
– The Entity/organisation (through a representative of the same).
– The Registration Authority (RA) or the Certification Authority (CA) if it knows or suspects that the private key of the Registrant has been compromised or knows or suspects any other event that makes it advisable.
– Third parties or interested parties that accredit any circumstance that could lead to revocation (final decision of the Provider or RA).
How to request the revocation of a certificate?
By sending an email to [email protected] attaching the revocation request FORM and following the instructions specified in the FORM.
Or in person at the external Registration Authority or the RA of the Provider.
The revocation will be carried out within a maximum period of 24 hours from the communication, provided that it has been authenticated, and an email will be sent to the Holder / Subscriber informing him/her of the time of revocation and the reason for the revocation.
Download MODEL revocation request form