The digital certificate must be revoked if the certificate holder’s key data related to the certificate has changed (name or surname, tax number of the user or business entity, employment etc.), in the event of misuse, or suspected misuse, or if the holder needs to obtain another digital certificate on the grounds of losing a smart card/USB key or forgetting the password.

A digital certificate can also be revoked on the basis of a request issued by a competent court, a misdemeanour judge or an administrative body.

The qualified digital certificate will be revoked within four hours of receiving a valid revocation request. Only in exceptional or unpredictable circumstances the revocation will be executed within 8 hours of receiving a suitable revocation request. In the specified time the qualified digital certificate will be marked as revoked in the directory and added to the register of revoked qualified digital certificates.

The register of revoked certificates is published on ldap://ldap.halcom.rs/ in accordance with LDAP conventions and on http://domina.halcom.rs/crls in accordance with HTTP. The current status of digital certificates can be checked on http://ocsp.halcom.rs.