Skip to main content

4. Certificate lifecycle operational requirements

4.1 Certificate application​

Pending.

4.2 Application processing​

Pending.

4.3 Issuance​

Pending.

4.4 Acceptance​

Pending.

4.5 Key pair and certificate usage​

Pending.

4.6 Renewal​

Pending. Cadences per profile — see individual CPs.

4.7 Re-keying​

Pending.

4.8 Modification​

Pending.

4.9 Revocation and suspension​

4.9.1 Circumstances for revocation​

ERPly Pro recognises the eleven canonical revocation reason codes in RFC 5280 §5.3.1, plus a framework-specific reason: regulatory revocation order, with a revocation SLA of ≤ 4 hours.

4.9.7 CRL issuance frequency​

nextUpdate ≤ 2 hours from thisUpdate.

4.10 Certificate status services​

X.509 v2 partitioned CRL with the idp extension, and RFC 6960 OCSP signed by a delegated responder.

4.11 End of subscription​

Pending.

4.12 Key escrow and recovery​

ERPly Pro does NOT offer subscriber private-key escrow or recovery. This is a deliberate decision to preserve non-repudiation. Compromise of a subscriber private key triggers revocation of the certificate, not recovery.