 In the PGP model, it is still called a "key", and is signed by various people who personally verified that the attributes match the subject.In both PKI and PGP models, compromised keys can be revoked.Revocation has the side effect of disrupting the relationship between a key's attributes and the subject, which may still be valid.