7 Revocation and suspension

7.1.1 When a certificate has been revoked or suspended, applications no longer trust it. A revoked certificate cannot be "unrevoked" but a suspended certificate can be reinstated. To prevent denial of service it is important that only authorised personnel can suspend and revoke a certificate.

7.1.2 When a person leaves the employment of an organisation, the Sponsor needs to revoke any S.E.E. Key business cards, so that the individual is not able to represent them. This is analogous to taking business cards, identity cards, and door access cards off someone during exit procedures.

7.1.3 A person may request the suspension or revocation of any type of S.E.E. Key. This is required in case of suspected loss of a S.E.E. Key.

7.1.4 A Sponsor may request the suspension or revocation of any S.E.E. Key associate or business card issued using one of their registered organisation names.

7.1.5 A CA may revoke any certificate due to non-compliance with their Certificate Practice Statement (refer paper 9).

7.1.6 If a S.E.E. Key is suspended the CA will need to revoke it after 30 days unless the subscriber requests otherwise. The subscriber may request that the S.E.E. Key be unsuspended if the subscriber is confident that there was no opportunity for misuse of the S.E.E. Key.