Revocation Findings

A certificate authority can revoke a certificate before it expires, for example when its key may have been exposed or it was issued in error. The check asks the CA whether the certificate has been revoked.

CERT_REV01: Certificate revoked by its CA

Key: CERT_REV01 · Label: Revoked · Severity: Error · Can be dismissed: No

What it means: the certificate authority has revoked this certificate.

Why it matters: clients that check revocation reject the certificate, and a CA usually revokes for a reason that needs action, such as a reported key compromise.

How to fix it: get a new certificate and install it. If the key may have been exposed, generate a new key for it rather than reusing the old one. Your CA's notice of the revocation says why it was revoked.

How to confirm: click Check Now on the monitor's page; the certificate's Revocation check reads "Not revoked".