CSR, certificate, and revocation
05Identifier authorization and possession of the certificate key are different checks.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 7.4 ↗
RFC 8555 · § 7.4EXAMPLE
3 / 3
03
Revoke separately
An authorized signed revocation request can invalidate the certificate.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Finalize an order with a CSR containing the requested identifiers.
- Finalize an order with a CSR containing the requested identifiers.
- The CSR must have a valid signature; its key need not be the account key.
- ACME defines a separate revocation endpoint.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy