What does HRESULT 0x80092010 (CRYPT_E_REVOKED) mean?

 
Previous Next
CRYPT_E_PENDING_CLOSE CRYPT_E_NO_REVOCATION_DLL

CRYPT_E_REVOKED

CRYPT_E_REVOKED (0x80092010) means that revocation checking determined that the certificate context being evaluated has been revoked. This is a final negative validation result, not a temporary network condition.

What the result identifies

CertVerifyRevocation reports the index of the certificate context that caused the failure and may provide a revocation reason. The revoked certificate can be the end-entity certificate or another certificate in the chain, so logging only the leaf certificate is often insufficient for diagnosis.

Correct response

  • Identify the revoked certificate and its issuer, serial number, and role in the chain.
  • Replace or reissue the affected certificate and update the deployment that selected it.
  • Verify that the application is opening the expected certificate store and building the intended chain.
  • Do not attempt to resolve the error by bypassing revocation validation; that would accept a credential the issuing authority has withdrawn.

See Microsoft documentation for CertVerifyRevocation.


Looking for a different code? Search another status or error code.