Revocation of Certificates

• Certificates have a period of validity

• Certificates can also be revoked because:

  • user’s key is compromised
  • user no longer certified by CA
  • CA’s certificate is assumed to be compromised

• CA maintains a list of revoked certificates and post it on the directory