Certificate revocation
process

Yes, revocation of a deceased person's certificate is possible using the form on the website https://revoke.certum.eu/.

The revocation process is not associated with any additional fees to Certum. It also does not result in a return of funds that were incurred for the purchase of the certificate.

The revocation process can be carried out on your account at https://panel.certum.pl/ (if your certificate is assigned to the account) or on the website https://revoke.certum.eu/, using a special form.

Such a certificate is placed on a special list called a CRL (Certificate Revocation List) and published by a certification authority that issued the certificate revoked by a subscriber (or an authorized person). Certificate revocation is equivalent to certificate expiry.

The certificate will be revoked within 24 hour at the most after all the necessary steps. You will receive confirmation of the certificate revocation via email.

A universal qualified certificate containing the Subscriber data may be canceled only upon their request. A qualified certificate with additional data may be canceled by both the Subscriber and an authorized representative of the represented entity. To do so, please use the form on this page.

No error in a certificate issued by a Trusted Third Party can be considered insignificant. A typo in the organization's name or an incorrect address can make it impossible to identify the organization unambiguously and reduce customer confidence or mislead the customer. For this reason, the safety standards clearly indicate that in case of any error, a certificate must be revoked. It is in the interest of both the certificate owner and the Certification Authority to take appropriate steps to revoke the incorrect certificate and replace it with a new one as soon as possible.

As soon as Certum receives and confirms a report of an incorrectly issued certificate, Certum shall contact the client to inform them of the fact. This allows to quickly replace the certificate before revocation occurs. In order to ensure your customers' certificate continuity, it is a good idea to prepare your customer service process in case an incorrect issuance is discovered. This process should include immediately informing the customer of the situation and quickly allowing them to replace the erroneous certificate with a new, correct one.   Certum allows you to issue a new certificate with corrected data in two ways, depending on the reason for revocation:  

1. Application of a reissue operation:

• in case of a compromised key or incorrect certificate structure it is possible to use the reissue operation – the advantage of this method is lack of additional verification and automatic certificate issuance, the reissue method does not allow to change the data;

2. Resubmission of an application:

• in case of a compromised key or incorrect certificate structure it is also possible to resubmit an application – for this method it is required to repeat the process of verifying the domains and data in the certificate;
• in case of incorrect data it is necessary to resubmit the application with correct data – for this method it is required to repeat the process of verification of domains and data in the certificate.

A Certification Authority that detects an incorrect issuance, or that receives a notification of an incorrect issuance, immediately informs the certificate owner of the situation. Standards for SSL certificates require that the certificate be revoked within 24 hours of notification to the Certificate Authority. In special cases, this period may be extended to a maximum of 5 days. The time to revoke an erroneous certificate depends on the scale of the threat it poses:  

• in case a private certificate's key was compromised or a domain verification was incorrectly performed, it will be up to 24 hours;
• in the case of an invalid field value in the certificate entity, it will be a maximum of 5 days.

  A complete list of reasons for revocation along with the specified time for revocation can be found in the Certification Practice  Statement (item 4.9.1). Exceeding the revocation deadline is unacceptable and may even result in a loss of trust for the Certification Authority. Revocation of a certificate means that its serial number is placed on the CRL (Certificate Revocation List) and marked as revoked in the OCSP (Online Certificate Status Protocol) database as a result of which browsers will not treat it as trusted. For the sake of continuity of security, it is a good idea to replace the certificate with a new, valid one before it is revoked.