# Certificate Revocation Policies

**URL:** <https://community.letsencrypt.org/t/certificate-revocation-policies/147797>\
**Category:** Help\
**Created:** [March 19, 2021, 7:46am UTC](https://community.letsencrypt.org/t/certificate-revocation-policies/147797 "2021-03-19T07:46:21Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![danb35](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/danb35/32/70869_2.png) [@danb35](https://community.letsencrypt.org/u/danb35)\
**Post date:** [March 23, 2021, 2:10am UTC](https://community.letsencrypt.org/t/certificate-revocation-policies/147797/6 "2021-03-23T02:10:57Z")

</div>

A somewhat-related topic is here:

> [@Remo.tv abuse system and fraud](https://community.letsencrypt.org/t/remo-tv-abuse-system-and-fraud/106320):
>
> H…

Not the sort of criminal activity you're talking about, but also not cybercrime. There, as here, the answer really is that it isn't the CA's issue--they certify only that the holder of the certificate demonstrated control over the domain name in question. While their TOS reserve the right to revoke certs in the case of criminal activity, they don't in any way obligate Let's Encrypt to do so, and I'm not aware of any mechanism for Let's Encrypt to consider petitions of the sort you're asking about.

And, IMO, that's as it should be. The cert doesn't demonstrate anything other than domain control, and shouldn't be seen as demonstrating anything else. And revoking it for any other reason undercuts that truth.

---

_[View the full topic](https://community.letsencrypt.org/t/certificate-revocation-policies/147797)._
