3

If I request my identity certificate to be revoked for any reason other than key compromise, would the private key also be revoked in result?

6

There is no revocation of different parts of the certificate, i.e. a certificate is either revoked in full or not revoked at all. This also means that the certificate itself is revoked and not the key of the certificate, i.e. other certificates which use the same key are not affected by the revocation. And this means that you are free to reuse the key for another certificate.

  • 6
    ... although practically you should use different keys for different purposes, if just because you'd have to revoke all certificates if the key does get compromised (and revocation is no panacea, e.g. revoking a certificate on enveloped data does not help if the private key has been compromised). – Maarten Bodewes May 26 at 14:24
  • @MaartenBodewes in fact, if you use the same key for encryption and signing, and I hear you have a certificate to revoke, I'm immediately putting my black hat on, scanning the CRL and then scouring the Internet for said private keys. – John Dvorak May 26 at 18:10

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.