A method for management of cryptographic keys and certificates for a plurality of vehicles, said method comprising steps of: for a vehicle of said plurality of vehicles: generating public/private key pairs; issuing over a spreading period of time a plurality of requests for certificates; creating and presenting an encrypted identity; and surrendering (S5b) for each certificate requested expired certificates equal in number to the plurality of certificates requested, except that when still initializing, less than the requested number of certificates may be surrendered; proving ownership of the surrendered expired certificates; for an assigning authority: receiving said public/private key pairs, said requests for certificates, said encrypted identity, and said expired certificates from said vehicle; checking and approving authorization of said vehicle with an authorizing authority; validating (S6, S7) said expired certificates against association with malicious behavior; confirming ownership of said surrendered expired certificates by said vehicle; and distributing said requested certificates equal in number to the number of surrendered expired certificates to said vehicle. for a vehicle of said plurality of vehicles: generating public/private key pairs; issuing over a spreading period of time a plurality of requests for certificates; creating and presenting an encrypted identity; and surrendering (S5b) for each certificate requested expired certificates equal in number to the plurality of certificates requested, except that when still initializing, less than the requested number of certificates may be surrendered; proving ownership of the surrendered expired certificates; generating public/private key pairs; issuing over a spreading period of time a plurality of requests for certificates; creating and presenting an encrypted identity; and surrendering (S5b) for each certificate requested expired certificates equal in number to the plurality of certificates requested, except that when still initializing, less than the requested number of certificates may be surrendered; proving ownership of the surrendered expired certificates; for an assigning authority: receiving said public/private key pairs, said requests for certificates, said encrypted identity, and said expired certificates from said vehicle; checking and approving authorization of said vehicle with an authorizing authority; validating (S6, S7) said expired certificates against association with malicious behavior; confirming ownership of said surrendered expired certificates by said vehicle; and distributing said requested certificates equal in number to the number of surrendered expired certificates to said vehicle. receiving said public/private key pairs, said requests for certificates, said encrypted identity, and said expired certificates from said vehicle; checking and approving authorization of said vehicle with an authorizing authority; validating (S6, S7) said expired certificates against association with malicious behavior; confirming ownership of said surrendered expired certificates by said vehicle; and distributing said requested certificates equal in number to the number of surrendered expired certificates to said vehicle.