× SSL247 joins forces with Sectigo CA - Find Out More...
Our accreditations and awards:
Cookies
0 items Total $0

Knowledge Base

  

Problem

You may encounter the following error message:

"Revocation information for the security certificate for this site is not available"


Cause

This problem may occur if the client browser is not able to access the Certificate Revocation List (CRL) Distribution Point (CDP) of the certificate used to secure the Web site.


Resolution

Run the following commands:

1. Locate the Certificate Revocation List (CRL) Distribution Point (CDP) of the certificate.

2. Open Microsoft Internet Explorer.

3. From the Tools menu, click Internet Options.

4. Click the Content tab.

5. Click Certificates.

6. Select the certificate and click View.

7. Click the Details tab.

8. Click CRL Distribution Point to view the URL of the Certificate Revocation List (CRL).

9. Edit your firewall settings to allow access to the CRL.


If the browser continues to receive an error message regarding verification of the certificate, configure the browser to stop it from checking the CRL as described below:

 

Problem

The error message you may encounter is the following

"Windows cannot determine the validity of this certificate because it cannot locate a valid certificate revocation list from the certificate authority that issued this certificate"


Cause

The SSL certificate does not contain a CRL Distribution Point field.


Resolution

To view the CRL Distribution point URL, follow these steps:

1. Open Internet Explorer

2. Click Tools, Internet Options then Content and Certificates.

3. Select the Certificate and click View.

4. Click the Details tab.

5. Go to the CRL Distribution Point field, the full URL for the CRL is shown here.
 

If the certificate does contain a CRL Distribution Point and the browser is still unable to access the CRL, then your firewall may need to be configured to allow access to the CRL.

To disable CRL checking in IE, please follow these steps:

1. In IE click Tools then Internet Options and Advanced

2. Scroll down to Security and untick the option "Check for server certificate revocation"

3. Restart IE.


More info here

Was this information Useful?
Comments

Privacy Policy