Blog Home
Blog Topics
Newsroom
  • Certificate Management
12-16-2020

Report Certificate Problems and Request Key Compromise Revocation at Speed: DigiCert's New Automated Revocation Solution

Jeremy Rowley
Report_Certificate

You can now submit a report of a private key compromise quickly and automatically get a revocation, if needed, with DigiCert’s Certificate Problem Reporting tool.

Responding to certificate problem reports and certificate revocation are key responsibilities of a certificate authority, and they are important aspects of ensuring online trust.

As part of our ongoing commitment to making the internet a safer space, ensuring the integrity of our certificates and continuously improving our processes, DigiCert recently released a new Certificate Problem Reporting Tool for compromised private keys, available to the general public.

How it works

The process for reporting compromised keys previously involved contacting the DigiCert support team. This new process enables faster responses and action. The reporting tool accepts evidence of compromised private keys and systematically verifies whether evidence provided is sufficient proof of compromise. If confirmed, the system schedules the impacted certificates for revocation.

Anyone can submit a problem report, including security researchers, customers and the general public. The new tool is available at problemreport.digicert.com.

How to use the Certificate Problem Reporting Tool

Note: if you own the affected certificate, you should use your CertCentral account to revoke and reissue it.

To submit a report of a compromised private key, follow these steps:

  1. Go to problemreport.digicert.com
  2. Select either “Use this form” or “Use API to report”
  3. Provide evidence of the compromised private key
    1. You must provide either a CSR with a common name of
      “Proof of Key Compromise for DigiCert” or the private key itself
  4. Provide your email address so that we can follow up on your report

To report other certificate problems, including certificate misuse, fraud or inappropriate conduct, send an email to revoke@digicert.com detailing the issue and the certificate details.

Once you have submitted your problem report, DigiCert will investigate the issue within 24 hours and determine appropriate action, including revocation, in-line with CA/B Forum Baseline Requirements and industry standards.

Learn more

For more information on certificate revocations and the process DigiCert uses, see our blog "A Guide to TLS Certificate Revocations."

Featured Stories

  • Secure Remote Work
11-09-2020

DigiCert 2021 Security Predictions

DigiCert
  • Best Practices
  • TLS/SSL
11-17-2020
Where Is Your Private Key?
Jeremy Rowley
  • Announcements
  • Product
  • Verified Mark Certificates
07-21-2020
DigiCert Issues VMCs (Verified Mark Certificates) for Gmail's BIMI Pilot; Company Logos in Emails Take an Important Step Forward in Email Industry
Dean Coclin
  • About

    At DigiCert, finding a better way to secure the internet is a concept that goes all the way back to our roots. That’s why our certificates are trusted everywhere, millions of times every day, by companies across the globe. It’s why our customers consistently award us the most five-star service and support reviews in the industry. And it’s why we’ll continue to lead the industry toward a more innovative and secure future. In SSL, IoT, PKI, and beyond—DigiCert is the uncommon denominator.

  • © 2021 DigiCert, Inc. All rights reserved. DigiCert and CertCentral are registered trademarks of DigiCert, Inc. in the USA and elsewhere. Other names may be trademarks of their respective owners.