As detailed in the Google Trust Services (GTS) Certification Practice Statement and Subscriber Agreement, GTS may need to revoke or opt to revoke for a number of reasons. Subscribers must be able to rotate certificates quickly should revocation be necessary. To prepare for revocation that may need to happen within a tight time interval, it is strongly suggested that subscribers use an ACME client with ACME Renewal Information (ARI) support and configure certificates such that they have fully automated lifecycle management. There are circumstances where Google may need to revoke within 24 hours or 5 days, even if doing so would cause adverse impact to a subscriber.
How quickly must I be able to replace a certificate?
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-04-14 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2026-04-14 UTC."],[],[]]