| Previous | Next |
| CRYPT_E_REVOCATION_OFFLINE | CRYPT_E_INVALID_NUMERIC_STRING |
CRYPT_E_NOT_IN_REVOCATION_DATABASE
CRYPT_E_NOT_IN_REVOCATION_DATABASE signals this condition: The certificate is not in the revocation server's database. The revocation service did not find the certificate context in its database. It is not equivalent to a successful “not revoked” result; the validation path must decide how to treat that outcome.
What to check
- Verify the issuing CA, serial number, and revocation endpoint intended for the certificate.
- Check whether the certificate belongs to the CA and revocation service being queried.
- Review the application’s chain and revocation policy before deciding whether an unavailable record is acceptable.
Microsoft: CertVerifyRevocation
Microsoft: CertVerifyCertificateChainPolicy
Looking for a different code? Search another status or error code.