Submit a request to revoke a Code Signing/EV Code Signing certificate

Revoking certificates 101

By default, when you revoke a code signing/EV code signing certificate on a certificate order, you also revoke the order and all associated certificates, including reissues and duplicates.

Do you want to keep the order active so you can replace the revoked certificates? Or do you only need to revoke a single certificate on the order, such as a reissued certificate?

See our Submit a request to revoke a single certificate on an order instructions.

Code signed by a revoked certificate

Revoking a code signing/EV code signing invalidates any code signed by that certificate, including timestamped signatures. The code may show a trust warning to users. To ensure your code remains trusted, resign any code signed by the revoked certificate with an active certificate.

Key compromise

If you revoke a certificate because the private key was compromised, you will need to provide proof of the compromised private key. This must be a CSR you create with a common name of "Proof of Key Compromise for DigiCert" or the private key itself.