The CSP SHALL demand subscribers to surrender or certify destruction of any physical authenticator that contains Accredited characteristics signed via the CSP once realistic immediately after revocation or termination can take spot.Single-issue cryptographic product verifiers generate a problem nonce, send out it to your corresponding authenticator