提交吊销 SSL/TLS 证书的请求
Before DigiCert can revoke the certificate, an account administrator may need to approve the revocation request.
警告
Items to note before revoking a certificate:
A revoked certificate is invalid and can’t be restored; in other words, it can’t be undone.
A revoked certificate loses remaining renewal time and can't be reissued or duplicated.
A website with a revoked certificate may show trust warnings to visitors.
Before you begin
By default, if you revoke a TLS certificate on a certificate order, you also revoke the order and all associated certificates, including reissues and duplicates.
Do you want to keep the order active so you can replace the revoked certificates? Or do you need to revoke a single certificate on the order, such as a reissued certificate? Then read our Submit a request to revoke a single certificate on an order instructions.
Key compromise
If revoking a certificate because the private key was compromised, you may want DigiCert to revoke any valid DigiCert-issued certificates linked to the compromised key.
Go to DigiCert's Certificate Problem Reporting page to submit a request to revoke any valid DigiCert-issued certificates linked to the compromised key.
Submit a request to revoke a TLS/SSL certificate
在您的 CertCentral 帐户的左侧主菜单中,转到证书 > 订单页面。
In the left menu, go to Certificates > Orders.
On the Orders page, select the order number for the TLS certificate you want to revoke.
For CertCentral Subscription accounts:
In the left menu, go to My Digital Trust Products > Certificates.
On the Certificates page, select the order number for the TLS certificate you want to revoke.
在订单页面,使用下拉列表、搜索框、高级搜索功能(显示高级搜索链接)和列标题筛选证书列表。
在订单编号列,单击您要吊销的 SSL/TLS 证书的快速查看链接。
Key compromise - My certificate's private key was lost, stolen, or otherwise compromised.
Cessation of operation - I no longer use or control the domain or email address associated with the certificate or no longer use the certificate.
Affiliation change - The name or any other information regarding my organization changed.
Superseded - I have requested a new certificate to replace this one.
Unspecified - none of the reasons above apply.
在订单编号详情窗格(页面右侧)中,单击吊销证书链接。
As an admin, you can revoke the certificate without admin approval. To do this, under Do you want to revoke without additional admin approval, select Revoke this certificate immediately.
在请求吊销订单证书页面的吊销原因框中,输入您要吊销证书的原因(例如,无需再使用证书)。
单击请求吊销。
接下来
Once a CertCentral account administrator approves your revocation request DigiCert revokes the certificate.
Administrators only: If you selected Revoke this certificate immediately, DigiCert revokes the certificate now.
Subscription accounts
If revoking an individual certificate or the certificate order, your CertCentral subscription doesn’t automatically mark the consumed domain as available. To make the domain available again, open your subscription, find the domain, and remove the consumed domain from the subscription.