| Previous | Next |
| CRYPT_E_NO_REVOCATION_CHECK | CRYPT_E_NOT_IN_REVOCATION_DATABASE |
CRYPT_E_REVOCATION_OFFLINE
CRYPT_E_REVOCATION_OFFLINE (0x80092013) means that Windows could not contact the revocation service needed to determine whether a certificate was revoked. It is an inconclusive revocation result, not proof that the certificate is valid or revoked.
What may be unavailable
Certificate revocation data is commonly obtained from CRL or OCSP locations referenced by certificate information. The failure can be caused by network routing, proxy settings, DNS, a blocked endpoint, an offline revocation server, or the absence of suitable cached data when validation is configured not to use the network.
How to investigate
- Record the full certificate chain and identify which certificate could not be checked.
- Check the revocation URLs, the machine's network and proxy context, and whether the service account has the same connectivity as an interactive user.
- Distinguish this error from
CRYPT_E_REVOKED: offline checking supplies no conclusion about the certificate's status. - Apply the product's documented certificate-validation policy rather than silently disabling revocation checking for every failure.
See Microsoft documentation for CertVerifyRevocation.
Looking for a different code? Search another status or error code.