Ask a Question

Advanced Search

Solution ID : SO11786

Last Modified : 10/09/2018

Certification Revocation Instructions

Solution

Customers should revoke their certificates as soon as they know of or suspect a compromise, which include:

  • Loss of private key
  • Compromise of private key
  • Incorrect information in the certificate itself
     

To revoke a RapidSSL certificate, perform the following steps:

  • To revoke an issued certificate from RapidSSL Security Center account, click here.
  • To revoke an issued RapidSSL certificate from User Portal, click here.
  • To revoke purchased RapidSSL certificate from a Partner, refer to SO9717

 

RapidSSL Security Center certificate revocation procedure

  1. Sign in to RapidSSL Security Center account
  2. From the certificate list, select the appropriate certificate to revoke
  3. Under the Order summary tab, click Revoke certificate


     
  4. Verify the certificate information, select the appropriate reason for revoking the certificate and click Continue


     
  5. Review the Revocation Agreement, click Revoke

Note:  By revoking a certificate will make it unusable. Any web server or web site with a revoked SSL certificate will no longer be secured.  Also note while the certificate may be revoked immediately it can take up to 24 hours until it is added to the Certificate Revocation List (CRL). Online Certificate Status Protocol (OCSP) responder will flag the certificate as revoked immediately.

 

Certificate revocation procedure from User Portal

  1. Browse to https://products.geotrust.com/geocenter/reissuance/reissue.do
  2. Provide the following information: 


    • The fully qualified domain name (common name) or Order ID for the certificate.
    • An email address contained on the order records.
    • The 5 digit code from the captcha image.
     
  3. You may be presented with a list of order numbers. Select Request Access against the current order ID, the reissue option will not be available on previous versions of the certificate.
  4. An email will be sent to the technical contact email address specified above
  5. Click on the link listed in the email to enter the User Portal
  6. Click the Revoke Certificate option in the left hand column

  7. Click I Approve


     

Note:  By revoking a certificate will make it unusable. Any web server or web site with a revoked SSL certificate will no longer be secured.  Also note while the certificate may be revoked immediately it can take up to 24 hours until it is added to the Certificate Revocation List (CRL). Online Certificate Status Protocol (OCSP) responder will flag the certificate as revoked immediately.