Revoke a Digital Signature: Process and Legal Guidelines

Introduction

A Digital Signature Certificate (DSC) is an electronic certificate used to verify the identity of a person or organisation while signing digital documents. DSCs are issued by licensed Certifying Authorities (CAs) under the framework of the Information Technology Act, 2000.

In certain situations, a DSC holder may need to revoke a Digital Signature when the certificate is compromised, incorrect information is found, the authorised signatory changes, or the certificate is no longer required.

The process to revoke a Digital Signature involves submitting a request to the concerned Certifying Authority. Once revoked, the DSC becomes invalid and cannot be used for future digital signing purposes.

Before applying for DSC-related services, applicants must complete the required verification and payment process. Understanding the DSC payment and verification process helps users complete DSC formalities correctly before issuance or further management of their Digital Signature Certificate.

What is Revocation of a Digital Signature Certificate?

Revocation of a Digital Signature Certificate means cancelling the validity of a DSC before its scheduled expiry date.

Under Section 38 of the Information Technology Act, 2000, a Certifying Authority may revoke a Digital Signature Certificate issued by it in certain circumstances. This includes situations where the subscriber or an authorised person requests revocation, or where specific conditions mentioned under the law apply.

After DSC revocation, the certificate status is updated by the Certifying Authority, and the certificate can no longer be relied upon for digital authentication or signing.

Why Should You Revoke a Digital Signature?

There are various reasons why a person or organisation may need to revoke a Digital Signature.

1. Security Concerns or Certificate Compromise

If the DSC credentials are compromised or there is a risk of unauthorised use, the certificate holder should request revocation to prevent misuse.

2. Loss of DSC Token

Digital Signature Certificates are generally stored in secure USB tokens. If the token is lost or stolen, DSC revocation helps prevent unauthorised signing activities.

3. Change in Authorised Signatory

Companies may need to revoke a Digital Signature when there is a change in the authorised signatory responsible for MCA filings, GST compliance, or other regulatory submissions.

4. Incorrect Information in DSC

If any material information provided in the DSC is incorrect or has been concealed, revocation may be required as per applicable provisions.

5. DSC is No Longer Required

A subscriber may request DSC revocation if the certificate is no longer required for digital signing or compliance purposes.

Who Can Request DSC Revocation?

A request to revoke a Digital Signature may generally be made by:

• The DSC subscriber or certificate holder
• A person authorised by the subscriber

Additionally, a Certifying Authority may revoke a DSC in circumstances specified under Section 38 of the Information Technology Act, 2000. These circumstances include false or concealed material facts, failure to meet issuance requirements, compromise affecting certificate reliability, or certain events relating to the subscriber.

Process to Revoke a Digital Signature Certificate

The exact process may vary depending on the Certifying Authority issuing the DSC. Generally, the following steps are followed:

Step 1: Identify the Issuing Certifying Authority

The first step is to identify the Certifying Authority that issued the Digital Signature Certificate.

The DSC holder must approach the same CA for submitting the revocation request.

Step 2: Submit DSC Revocation Request

The subscriber needs to provide relevant details, which may include:

• DSC holder information
• Certificate details
• Reason for revocation
• Supporting documents, if required by the CA

The information submitted should match the records available with the Certifying Authority.

Step 3: Verification of Request

The Certifying Authority verifies the request according to its prescribed procedures.

Once the verification process is completed, the DSC status is updated as revoked.

Step 4: Confirmation of DSC Revocation

After approval, the subscriber receives confirmation regarding the revocation status from the Certifying Authority.

Information Required for DSC Revocation

The requirements for DSC revocation may differ among Certifying Authorities. Generally, the following information may be required:

Difference Between DSC Expiry and DSC Revocation

What Happens After You Revoke a Digital Signature?

After DSC revocation:

• The certificate becomes invalid for future digital signing.
• The revoked DSC cannot be used for authentication purposes.
• The revocation status is recorded by the Certifying Authority.
• A new DSC application may be required if digital signing is needed again.

A subscriber should not use a revoked Digital Signature Certificate for any compliance filing or electronic authentication.

Can a Revoked Digital Signature Be Activated Again?

A revoked Digital Signature Certificate generally cannot be reactivated.

Revocation permanently cancels the validity of the certificate. If the subscriber requires digital signing facilities again, a fresh DSC application must be made through a Certifying Authority.

DSC Suspension vs DSC Revocation

Legal Considerations for DSC Revocation

Businesses and individuals should consider the following points while applying for DSC revocation:

• DSC holders should immediately report suspected misuse or compromise of DSC credentials.
• Companies should update DSC records after changes in authorised signatories.
• Revocation requests should be submitted through the issuing Certifying Authority.
• A revoked DSC should not be used for signing digital documents.

Section 38 of the Information Technology Act, 2000 provides the legal framework for revocation of Digital Signature Certificates and specifies circumstances under which a Certifying Authority may revoke a certificate.

Get Assistance with Digital Signature Services

Managing a Digital Signature Certificate requires proper verification and compliance with the applicable process. Whether you need assistance with DSC registration, renewal, or revocation, Ebizfiling can help you with the required documentation and guidance.

Our experts assist individuals, businesses, and professionals in managing Digital Signature Certificate-related requirements and other compliance services.

Need help with your Digital Signature Certificate? Connect with Ebizfiling today for expert assistance.

Conclusion

To revoke a Digital Signature is an important security step when a DSC is compromised, incorrectly issued, no longer required, or when there is a change in the subscriber details.

Since a revoked Digital Signature Certificate cannot generally be restored, users should complete the DSC revocation process through the appropriate Certifying Authority and apply for a new DSC whenever required.

You May Also Read:

How to register DSC on MCA

Difference Between Digital Signature and Electronic Signature

Frequently Asked Questions