Revocation of qualified certificates

(1) The qualified trust service provider must revoke a still-valid qualified certificate without delay, in particular where
1. the person to whom the qualified certificate was issued so requests,
2. the qualified certificate was issued on the basis of incorrect information relating to Annexes I, III and IV of Regulation (EU) No 910/2014,
3. it ceases its activity and that activity is not continued by another qualified trust service provider, or
4. facts justify the assumption that
a) the qualified certificate has been forged or is not sufficiently secure against forgery, or
b) the qualified electronic signature-creation devices or qualified electronic seal-creation devices used have security deficiencies. Further grounds for revocation may be agreed contractually. Where a qualified certificate was issued containing incorrect information, the qualified trust service provider may additionally mark this.
(2) Where a qualified certificate contains attributes under section 12(1) or section 12(3) sentence 2, the third person, or the body responsible for the information relating to the official or professional position or other information about the person, may also request revocation of the certificate where
1. the power of representation lapses, or
2. the conditions for the information relating to the official or professional position or other information about the person cease to apply after inclusion in the qualified certificate.
(3) Where the conditions under subsection (1) sentence 1 number 3, or one of those under subsection (1) sentence 1 number 4, are met, the supervisory body may order the revocation of a qualified certificate.