| Previous | Next |
| TRUST_E_FAIL | CERT_E_UNTRUSTEDTESTROOT |
CERT_E_REVOKED
CERT_E_REVOKED (0x800B010C) means that certificate validation found a certificate that its issuer has explicitly revoked. This is different from being unable to obtain revocation information: the revocation check completed with a revoked result.
What to identify
- Which certificate in the evaluated chain was reported revoked: the leaf certificate or an issuing certificate.
- The certificate serial number, issuer, thumbprint, validity period, and the chain actually built by Windows.
- The revocation source used for that decision and the time of the validation attempt.
What not to conclude
A revoked certificate should not be made trusted by disabling revocation checking. Also keep this status separate from CERT_E_REVOCATION_FAILURE, which means Windows could not complete the revocation check.
Recovery
Replace the revoked certificate with a valid certificate issued for the intended identity and usage, or correct the application/server configuration if it is presenting an obsolete revoked certificate. Then rebuild and validate the chain again under the same trust and revocation policy.
Technical references
Looking for a different code? Search another status or error code.