CertiGuide to Security+  9  Chapter 4:  Basics of Cryptography (Domain 4.0; 15%)       9  4.5  Key Management and Certificate Lifecycles

4.5.4  Expiration 1 Certificate Revocation Techniques

As discussed before, a digital certificate can be revoked under circumstances specified by the issuing CA, and once revoked, that digital certificate is permanently “gone.” Should the user want another digital certificate, they will have to obtain a new one.

VeriSign states the following reasons permitting revocation:

• “There has been a loss, theft, modification, unauthorized disclosure, or other compromise of the private key of the certificate's subject.
  
  
• The certificate's subject (whether an IA (Information Assurance) or a subscriber) has breached a material obligation under this CPS (Certification Practice Statement), or
  
  
• The performance of a person's obligations under this CPS is delayed or prevented by an act God; natural disaster; computer or communications failure; change in statute, regulation, or other law; official government action, including but not limited to acts by agencies responsible for export control administration; or other cause beyond the person's reasonable control, and as a result another person's information is materially threatened or compromised.”

4.5.4  Expiration 1 Certificate Revocation Techniques