What happens when an SSL certificate is revoked?
What should happen when you revoke an SSL certificate. When your SSL certificate is revoked, your issuer will add an identifier serial number for your cert to OCSP (Online Certificate Status Protocol) servers and CRLs (Certificate Revocation Lists), which are distributed by Certificate Authorities (like Sectigo).
How do I remove revocation information?
If you would like to disable the alert, follow the instructions below:
- Open Internet Explorer and go to Tools > Internet Options.
- Click the Advanced tab.
- Scroll down to the Security section.
- Disable Check for server certificate revocation*.
- Internet Explorer must be restarted for the change to take effect.
Is there a deadline to revoke SSL certificates?
This is resulting in a mass revocation of 3,048,289 valid SSL certificates out of their 116 million. That’s 2.6% of all of their existing certificates! So, if you don’t renew your affected SSL/TLS certificate (s) before the March 4 revocation deadline, you’re going to find yourself in hot water.
Why do I need to renew my SSL certificate?
Once you have full authority over your certificates, it is up to you to maintain it. Understanding exactly how certificate renewal, certificate reissue, and certificate revocation works will empower you to maintain your network’s security, reliability, and reputation. When is the best time to apply for a certificate renewal?
When does a Certificate need to be revoked?
A certificate should be revoked immediately when its private key shows signs of being compromised. It should also be revoked when the domain for which it was issued is no longer operational. Certificates that are revoked are stored on a list by the CA, called the Certificate Revocation List (CRL).
What happens when I renew my DigiCert SSL certificate?
When you renew, DigiCert transfers as much remaining validity as possible to the renewed certificate without exceeding the new 397-day maximum certificate validity. Any validity that we cannot transfer directly to the certificate is transferred to your order. To learn more, see End of 2-year DV, OV, and EV public SSL/TLS certificates.