Error guide / NET::ERR_CERT_REVOKED

NET::ERR_CERT_REVOKED error

NET::ERR_CERT_REVOKED means the site's SSL certificate was revoked by the certificate authority before its expiry date. The browser checks revocation lists, finds this certificate on one, and blocks the connection. A revocation usually means the certificate can no longer be trusted.

What causes it

The certificate authority revokes a certificate for reasons like a compromised private key, an issuance mistake, or a request from the owner. So the problem is on the site's side, and the old certificate cannot be repaired, only replaced.

How to fix it

1. Check the certificate status with the SSL test below to confirm the revocation and see the details.
2. Reissue a new certificate in place of the revoked one. On cPanel/LiteSpeed this is done by AutoSSL from Let's Encrypt.
3. If the key may have been compromised, generate a fresh key pair instead of reusing the old private key.
4. Remove the revoked certificate from the server so the panel does not keep serving it.
5. After installing the new certificate, test the site in a private window, since the browser may have cached the old check.

Related errors

• ERR_CERT_DATE_INVALID ERR_CERT_DATE_INVALID error
• ERR_CERT_AUTHORITY_INVALID ERR_CERT_AUTHORITY_INVALID error
• ERR_CERT_COMMON_NAME_INVALID ERR_CERT_COMMON_NAME_INVALID error
• ERR_SSL_PROTOCOL_ERROR ERR_SSL_PROTOCOL_ERROR error