Which statement describes the process when a token's certificate expires?

• A. Revocation request submitted to RA office
• B. Token continues to work
• C. PIN can be reset
• D. Certificate is renewed automatically

Answer: (A)

When a certificate reaches its expiration date, it stops being valid for use. Expiration simply marks that the certificate can no longer be trusted after that point, so the token must obtain a new certificate to continue securely authenticating or signing. Revocation, on the other hand, is a mechanism used to invalidate a certificate before its scheduled expiry—typically because the private key was compromised or the certificate should no longer be trusted for some other reason. It’s not the process triggered by expiration.

So, the normal remedy for an expired certificate is to renew or reissue the certificate so the token can again be trusted. Some systems may support automatic renewal if configured, but that depends on policy. The idea behind expiration is renewal, not revocation.