Scam messages have been sent out in the Tax Administration’s name. Read more about scams.

Certificates can be revoked in the certificate service’s e-service

The certificate service manages all certificates granted by the Finnish Tax Administration. All types of certificates can also be revoked in the certificate service.

If you wish to revoke a certificate, log in either to the certificate service for production or testing certificates and use the Revoke certificate function. After a certificate has been revoked, it can no longer be used in the Tax Administration's API service for which it was designed.

The Tax Administration's API services that use the certificates of the certificate service are:

  • Vero API
  • ApitamoPKI
  • Incomes Register
  • Positive credit register

You can revoke a certificate in the e-service at any time.  

Request a production certificate to be revoked if:

  • The private key of your certificate is misplaced or disclosed to unauthorised parties;
  • You suspect that a private key has been disclosed to an unauthorised party; or
  • The certificate is unnecessary.
  • The organisation you represent has stopped operating because the organisation has merged with another company because of business restructuring, for example.

The grantor of the certificate may also revoke it in the following situations, for example:

  • The agreement entitling to the use of the service ends
  • It is apparent that the issued certificate has been misused
  • The operations of the organisation requesting the certificate has stopped because the organisation has merged with another company because of business restructuring.

Situations, where it is not possible to revoke a certificate in the e-service

There may be occasional maintenance breaks in the certificate service, during which revoking certificates is not possible.

Check any upcoming maintenance breaks: Maintenance breaks and disruptions in the Tax Administration Service

If you cannot access the e-service for another reason (e.g. The Suomi.fi authorisations are not valid or you are unable to log in to the service for another reason), in a non-urgent situation, you can

  • report the matter with an observation form, or
  • contact the Incomes Register’s customer service at 029 497 550 (Mon–Fri between 9 am and 4 pm, between 9 am and 4 pm in July).

If the organisation's operations have ceased and you wish to revoke a certificate, please send an observation form to the Tax Administration.

Urgent situations

You can call the on-call service number if certificates must be revoked immediately and certificates are at risk.

On-call service number: +358 9427 34,834

The on-call service number only processes urgent cases in which certificates are at risk. 

Who can revoke a certificate

For revoking production certificates, the organisation must also grant a Suomi.fi authorisation to the organisation's representative that manages its certificates. The authorised representative can revoke the certificate in the e-service.

The following types of Suomi.fi authorisations for the certificate service can be used for revoking certificates:

  • Submitting an API application and requesting certificates for taxation, income data and credit information
  • Requesting and retrieving certificates for taxation, income data and credit information
  • Processing log, interface and report data related to income data

In addition, certificates may also be revoked by the individual authorised to sign for the organisation

Read more about Suomi.fi authorisations for the certificate service: Certificates - vero.fi

To revoke testing certificates, a user must also belong to the testing organisation's group. Testing certificates can be revoked with both the administrator and member roles.

Read more about testing organisation groups: My details and groups -vero.fi

The Incomes Register information user's certificates

The Incomes Register information user's certificates can be revoked in the certificate service if the organisation's representative has the right to process the certificates in accordance with the data permission.

Read more here: Data permission- The Incomes Register

How to revoke a certificate

  • 1

    Log in to either the production or testing certificates e-service of the certificate service

  • Identify yourself using your online banking codes, a mobile certificate or a certificate card.

    You can log in  on the certificate service home page: certificate service - vero.fi

    Production certificates; If you have a Suomi.fi authorisation to multiple different organisations, select the organisation whose certificates you are revoking when logging in.

    Testing certificates; If you belong to multiple testing organisation groups, you can view each organisation’s information after logging in.
  • 2

    Select the desired certificate and check its details

  • The Revoke certificate button is shown on a separate view for each certificate.
  • 3

    Use the Revoke certificate button

  • The certificate view will open a new pop-up window showing the exact certificate information for the certificate to be revoked and a request to select the reason for revoking.
  • 4

    Check the certificate information

  • Check that the certificate shown on the view is the one you wish to revoke.

    The view will show the following identifier information for the certificate:

    • Certificate's organisation, CN (Common name)
      • The production certificate e-service show the name and correct company identifier of the production organisation.
      • The testing certificate e-service show the testing organisation’s name and company identifier as well as the name and artificial business ID of the artificial identifier.
    • Certificate type
    • Certificate description

    In addition, the view shows the following checkboxes:

    • I wish to temporarily prohibit the use of the certificate
    • I wish to permanently revoke the certificate 
  • 5

    Select whether you wish to temporarily prohibit the use of the certificate or permanently revoke it

  • If the use of a certificate has been temporarily revoked, the certificate can be restored.

    You can use this function if you suspect that a certificate is at risk or unnecessary but do not wish to revoke it permanently.

    Certificates that have been permanently revoked cannot be restored at a later time. 
  • 6

    If you select to permanently revoke a certificate, you must also select a reason for revoking it. Select one of the reasons below. If none of the reasons match your situation, select Other

    • Private key at risk
    • Replaced with a new certificate
    • Discontinuing of use
    • Other 
  • 7

    Select the request to revoke the certificate by using the Send button

  • The request to revoke a certificate will be sent to the certificate service's PKI system. 
  • 8

    Processing a request to revoke a certificate

  • The information of the revoked certificate will be updated to the e-service, and the certificate will be shown as revoked.

    After revoking, it is no longer possible to use the certificate in the Tax Administration's API service for which it was created.

  • Temporary prohibition of use

    If a temporary prohibition of use has been requested for a certificate, it cannot be used temporarily.

    You can restore a certificate by using the “Restore certificate” function in the e-service. 

    If a certificate the use of which has been temporarily prohibited is not restored within 30 days, the Tax Administration shall permanently revoke the certificate.

  • You can also revoke a certificate by using the “Revoke a certificate permanently” option.

Use case examples

The organisation's representative is using the certificate service. They wish to set a temporary prohibition on the use of the certificate because they believe the certificate has fallen to the wrong hands. The type of certificate is Benefits payment data provider Web Service, and it is used to report benefits payment data to the Incomes Register.

The user logs in to the certificate service and uses the Revoke certificate function. They check that the information is correct and select the Request a temporary prohibition on the use of the certificate function. The certificate service processes the request to revoke the certificate and updates the information of the revoking to the e-service. The certificate can no longer be used in the Incomes Register's API calls.

When the use of a certificate is temporarily prohibited, it is still possible to restore it by using the Restore certificate function. Users can also select the Revoke a certificate permanently function if they wish to revoke a certificate completely.

If the use of a certificate is temporarily prohibited and the certificate is not restored within 30 days, the Tax Administration shall permanently revoke the certificate.
Page last updated 12/19/2025