Should you revoke expired certificates?
Revoking is essentially useless as the certificates are expired. Revocation is for time valid certificates that must be terminated prior to their expiration date. It is technically possible to delete expired certificates but just make sure you will never want to check if they were issued in the past.
Under what circumstances might a certificate Authority revoke a certificate?
Certificate revocation is the act of invalidating a TLS/SSL before its scheduled expiration date. A certificate should be revoked immediately when its private key shows signs of being compromised. It should also be revoked when the domain for which it was issued is no longer operational.
Is the certificate associated with a digital signature valid?
The digital signature is valid. The certificate associated with the digital signature is current (not expired). The signing person or organization, known as the publisher, is trusted. Important: Signed documents, which have a valid time stamp, are considered to have valid signatures, regardless of the age of the signing certificate.
Is the time stamp on a digital signature valid?
Important: Signed documents, which have a valid time stamp, are considered to have valid signatures, regardless of the age of the signing certificate. The certificate associated with the digital signature is issued to the signing publisher by a reputable certificate authority (CA).
Can a certificate be revoked for any reason?
Certificates are issued by a certification authority, and like a driver’s license, can be revoked. A certificate is usually valid for a year, after which, the signer must renew, or get a new, signing certificate to establish identity. Note: You can learn more about public and private keys in this article.
When do you need to renew a certificate or public key?
When you send a digitally-signed macro or document, you also send your certificate and public key. Certificates are issued by a certification authority, and like a driver’s license, can be revoked. A certificate is usually valid for a year, after which, the signer must renew, or get a new, signing certificate to establish identity.