1. 1. A licensed certification authority shall revoke a certificate which it issued, but which is not a transactional certificate, after:

   1. (1) Receiving a request for revocation by the subscriber named in the certificate; and
   2. (2) Confirming that the person requesting revocation is that subscriber, or is an agent of that subscriber with authority to request the revocation.
2. 2. A licensed certification authority shall confirm a request for revocation and revoke a certificate within one business day after receiving both a subscriber's written request and evidence reasonably sufficient to confirm the identity and any agency of the person requesting the suspension.

3. 3. A licensed certification authority shall revoke a certificate which it issued:

   1. (1) Upon receiving a certified copy of the subscriber's death certificate, or upon confirming by other evidence that the subscriber is dead; or
   2. (2) Upon presentation of documents effecting a dissolution of the subscriber, or upon confirming by other evidence that the subscriber has been dissolved or has ceased to exist.
4. 4. A licensed certification authority may revoke one or more certificates which it issued if the certificates are or become unreliable, regardless of whether the subscriber consents to the revocation.
5. 5. Immediately upon revocation of a certificate by a licensed certification authority, the licensed certification authority shall publish signed notice of the revocation in any repository specified in the certificate for publication of notice of revocation. If any repository specified in the certificate no longer exists or refuses to accept publication, or is no longer recognized pursuant to section 28.672, the licensed certification authority shall publish the notice in any recognized repository.

6. 6. A subscriber ceases to certify the information, as provided in section 28.633, and has no further duty to keep the private key secure, as required by section 28.636, in relation to a certificate whose revocation the subscriber has requested, beginning with the earlier of either:

   1. (1) When notice of the revocation is published as required in subsection 5 of this section; or
   2. (2) Two business days after the subscriber requests revocation in writing, supplies to the issuing certification authority information reasonably sufficient to confirm the request, and pays any contractually required fee.
7. 7. Upon notification as required by subsection 5 of this section, a licensed certification authority is discharged of its warranties based on issuance of the revoked certificate and ceases to certify the information, as provided in section 28.630, in relation to the revoked certificate.

(L. 1998 S.B. 680 § 15)