2 ms·
It is not closely examined. The "examination" for revocation is very simple for every CA - does the request include demonstrated control of the private key. If
by olliej 6y ago
It is not closely examined.
The "examination" for revocation is very simple for every CA - does the request include demonstrated control of the private key. If it does, honor the revocation request. They have at most one business day to revoke. For evidence of actual compromise (e.g. not a first party revocation request) they have 24 hours. Note that the the CARB rules don't allow the CA to delay revocation for compromised certs, even if the true owner asks for it.