skip to content
Site Navigation
Home
About CSOS
Policies
Enroll in CSOS
Certificate Mangement
Reporting
Developer Utilities
Contact Support

Quick Links

External Links

CSOS Certificate Management
Revocation

About Revocation

Revocation is the process of invalidating a CSOS Certificate before its expiration date. The CSOS CA places invalidated certificates on a Certificate Revocation List (CRL) that is checked by all suppliers before a CSOS transaction is completed. Revocation may be requested by the certificate's owner or a coordinator for the certificate's associated DEA Registration. Additionally, the CSOS CA or PMA may revoke certificates.



Reasons for Revocation

Common reasons for revocation include:

  • Termination of the subscriber's employment
  • Changes in subscriber information
    • Legal name change
    • Change of E-mail address
  • Changes in DEA Registration information
    • Registration number changed or no longer used
    • Change of authorized schedules
    • Change of address or registration name
  • Policy violations
  • Private key compromise (i.e. theft and/or unauthorized usage)


Revocation Methods

Certificates may be revoked by digitally signed E-mail (preferable) or phone call. All requests will be thoroughly authenticated by the CSOS CA.

Certificates may be revoked by the following individuals:

  • The subscriber (i.e. owner of the certificate)
  • The subscriber's CSOS Coordinator
  • The DEA Registrant
  • If no coordinator exists, and/or the subscriber is the DEA Registrant, certificates may be revoked by a supervisor via phone call and postal mailed letter
  • The CSOS CA or PMA


Results of Revocation

Revoked certificates are permanently added to the CSOS CA's Certificate Revocation List (CRL). Since suppliers are required to check this list to verify the validity of each Certificate, revoked certificates will not pass validation.

Return to Certificate Management

Return to previous screen