Skip to content

Mobile-ID Digital TrustISO/IEC 27001:2022 · SIS351224I008Published certification scope

View evidence

DEVELOPER

Certificate Lifecycle

Manage request, issuance, installation, inventory, expiry monitoring, rotation and revocation as an operational lifecycle.

01 / CONCEPT

Integration contract

01

Inventory

Track owner, purpose, environment, issuer, serial/fingerprint and expiry.

02

Issuance

Use approved request/approval process; private key stays with its protected owner where designed.

03

Rotation

Test new certificate before cutover and keep controlled overlap when protocol allows.

04

Revocation

Compromise or decommissioning triggers revocation and dependent configuration cleanup.

02 / WORKFLOW

From sandbox to evidence

01Request certificate
02Approve intended purpose
03Install securely
04Validate connectivity
05Monitor expiry
06Rotate before deadline
07Revoke/decommission with evidence

03 / SECURITY & PRODUCTION

Production is an evidence decision

Certificate availability depends on timely inventory, expiry monitoring, secure key custody, staged rotation and revocation/decommission procedures.