Certificate revocation refers to the process of rendering a digital certificate invalid before its expiration date. This means the digital certificate cannot be trusted or used for signing. The revoked certificate is published in the Certificate Revocation List (CRL)

Circumstances that warrant certificate revocation

1. When the identification information is invalid.
2. When the information in the certificate becomes invalid.
3. When the subscriber has violated the subscribe agreement.
4. When the private key has been compromised.
5. When the certificate was not issued procedurally.
6. When an emergency has occurred and may impact the integrity of the certificate.

Digital Certificate Revocation Process

1. The subscriber requests the Authorized Organization Representative of the revocation of a digital certificate citing a reason for the request.
2. The Authorized Organization Representative verifies and validates the request.
3. The  Authorized Organization Representative submits the request for revocation to the GovCA.

Token loss and reissuance process

1. The subscriber reports to the police station on the loss of the token and obtains a police abstract.
2. The subscriber informs the Authorized Organization Representative on the loss of the token, provides the police abstract, and requests for a new token.
3. The Authorized Organization Representative makes a request to GovCA for revocation of the certificate.
4. GovCA shall accept the request and revoke the certificate and issue a new token.

Token return process

1. The subscriber initiates the process of token return.
2. The Authorized Organization Representative verifies and validates the correctness of the information.
3. The Authorized Organization Representative submits the request to GovCA.