Various circumstances can invalidate a certificate
before the expiration date. Some examples are a change of name,
change of association between subject and certificate authority
(for example, an employee terminates employment), and compromise
(known or suspected) of the private key. Under such circumstances, the
certificate authority (CA) that issued the certificate must revoke
it. The following task describes how to revoke a certificate for
which the firewall is the CA.