Can root certificate be revoked?
3 Answers. You can’t revoke a trusted (e.g. Root CA) certificate, because it is self-signed by the CA and therefore there is no trusted mechanism by which to verify a CRL. If a root CA is compromised it is very bad :-).
What is a revocation status?
Certificate revocation is the act of invalidating a TLS/SSL before its scheduled expiration date. A certificate should be revoked immediately when its private key shows signs of being compromised. A more recent and sophisticated method of detecting revoked certificates is the Online Certificate Status Protocol (OCSP).
How to check revocation status of a certificate?
In this case you could simply click on the channel “Revocation Status” and change in its settings-dialogue the Lookup field to “None”. In case the certificate contains a URL to check revocation status, the Probe running the sensor (PRTG Core Server or Remote Probe) needs internet access in order to check the revocation status.
How is revocation of a root certificate handled?
Revoking a CA whose certificate was issued by one of the root CAs means that all the certificates that CA has issued are no longer valid. This happens during path processing, we start at the certificate we are trying to verify and then build a path all the way to a trusted root.
Why is my server unable to check revocation status?
In case the certificate contains a URL to check revocation status, the Probe running the sensor (PRTG Core Server or Remote Probe) needs internet access in order to check the revocation status. Our core server meets all these conditions but still shows this error message. Might it be because we are using a wildcard certificate?
Why was the certificate status could not be determined?
Problem: The certificate status could not be determined because the revocation check failed When I import a new internal CA certificate for my exchange server, it was unable to associate any service and said “The certificate status could not be determined because the revocation check failed”