Knowledge Base
How to Revoke Certificate when Private Key is Compromised?
Similar Questions:
What steps should I take if my private key is leaked?
What actions are required when a private key is exposed?
How do I revoke and reissue a certificate after a private key compromise?
What is the process for replacing a certificate with a compromised private key?
Overview
If the private key associated with your certificate is compromised, the certificate must be revoked immediately to prevent unauthorized use.
Why is revocation critical?
A compromised private key allows attackers to impersonate your website.
Revoking the certificate invalidates it in browsers and prevents trust misuse.
This step-by-step guide helps you to revoke your certificate and also reissue a new certificate with a new CSR.
Steps to follow while revoking your certificate if your private key is compromised
Step 1: Generate a New Private Key and CSR
-
On your server or device:
-
Create a new private key.
-
Generate a new CSR (Certificate Signing Request) using the new key.
-
Do not reuse the compromised key.
Step 2: Log in to Sectigo Portal
-
Navigate to: Login - Sectigo
-
Enter your credentials.
Step 3: Revoke the Compromised Certificate
-
Go to Orders → Select Certificate → Revoke.
-
Provide a reason: Private Key Compromised.
-
Confirm the revocation request.
Step 4: Request a Reissue
-
After revocation, click Reissue.
-
Upload the new CSR generated in Step 1.
-
Complete domain/organization validation if required.
-
Download and install the new certificate.
Important Notes
-
Revocation is permanent; the old certificate cannot be reinstated.
-
Reissue is free during the certificate’s validity period.
-
Notify your security team and update any systems using the old certificate.
Best Practices
-
Use strong encryption (RSA 2048+ or ECC).
-
Store private keys securely (preferably in an HSM).
Related Articles:
Tags:
Need help?
Need help making a purchase? Contact us today to get your certificate issued right away.
Live chat
Click the button below or click "Chat with an Expert" to start chatting with us now!
