CertOneSome situations require revoking a certificate and requesting a replacement. This guide explains the reasons and process.
1. Reasons for revocation
1. Private key exposure
If a private key is compromised, revoke its certificate immediately.
2. Domain changes
Revoke the old certificate when its domain is no longer used or must change.
3. Security incidents
A security incident may require certificate revocation.
2. Revocation procedure
1. Contact the CA
Request revocation from the certificate authority.
2. Supply certificate details
Provide the serial number, domain, and other requested information.
3. Verify authorization
The CA verifies that the requester is authorized.
4. Complete revocation
The CA revokes the certificate and publishes its revocation status, for example in a CRL.
3. Request a replacement
1. Obtain a new certificate
Follow the normal certificate request process.
2. Update the configuration
Configure the server to use the replacement certificate.
3. Verify
Verify that the new certificate works correctly.
Conclusion
Revocation is an important response to certificate security incidents. Follow the CA's procedure and deploy a valid replacement to restore service safely.