A certificate owner, or the CA who signed it, can revoke certificates due to a number of reasons. In that case the certificate is no longer valid and MIDlets signed with them should not be installed. S60 and Series 40 devices supporting the Online Certificate Status Protocol (OCSP) will verify the validity of the certificate during the installation.