Revoke a digital certificate in Spain
A copied digital certificate can enable impersonation. Deleting it from one browser does not invalidate copies held elsewhere.
Identify the issuer
This guide particularly concerns FNMT individual certificates. Check issuer, certificate type and application records. Other certificates and representative certificates may use different routes.
Act on suspected compromise
FNMT provides revocation especially where a certificate is lost or potentially known to others. Use a trusted device. Do not export a private key to unknown people for inspection.
Choose the available route
With access to the certificate, the official online service may apply. Without access, FNMT describes in-person accreditation or its telephone service subject to requirements. Obtain current contacts directly from the official page.
Keep confirmation and scope
Save evidence and record time and certificate concerned. Revocation is different from signing out of one website. Review other access on the affected device where relevant.
Recover safely
A revoked certificate cannot simply be reactivated. Coordinate reissuance and secure storage with investigation of the cause. Suspected misuse requires separate review of affected transactions and further action.
Official sources and next steps
Related assistance: Administrative services in Spain.
Related next steps: WordPress backups: prepare a working restore · WordPress hacked: recovery and root-cause review.
Prepare your enquiry
Describe issuer, incident and whether the certificate remains accessible. Never send certificate files, private keys or export passwords in an open enquiry.
Request assistance in EnglishUpdated: 23 October 2026. General guidance. Your circumstances and the current requirements of the competent authority are decisive.
