---
title: "ERR_CERT_REVOKED — test your site, then fix it"
description: "Run a free live check to see whether ERR_CERT_REVOKED is happening on your own domain right now, then work through the causes ranked most likely first."
canonical: "https://lemwatch.com/errors/err-cert-revoked"
source: "https://lemwatch.com"
---

# ERR_CERT_REVOKED: The certificate was revoked by its issuer

> The CA has explicitly revoked this certificate — usually because the private key was compromised, the certificate was reissued, or the domain validation was withdrawn. Renewing is not enough; the revoked certificate must stop being served.

## Short answer

 The CA has explicitly revoked this certificate — usually because the private key was compromised, the certificate was reissued, or the domain validation was withdrawn. Renewing is not enough; the revoked certificate must stop being served.

## What ERR_CERT_REVOKED means

 Revocation is published via CRL and OCSP. Once a browser sees a revoked serial it refuses the connection with no bypass, because revocation is the mechanism used after a key compromise.

## Causes and fixes, most likely first

- A replacement certificate was issued and the old one revoked, but the server still serves the old file. Deploy the new certificate and reload. Confirm with an external check that the served serial matches the new certificate.
- The private key was exposed and the CA revoked it. Generate a completely new key pair — never reuse the compromised key — and reissue.

## How to stop it happening again

- Track the served certificate's serial number so a stale file is caught immediately after any reissue.

## Check your own domain

 The SSL check reports the serial and revocation status of the certificate actually being served, which is the only way to confirm the old one is gone.

## Frequently asked questions

### Can I bypass a revoked certificate?

 No, and you should not want to. Revocation is the mechanism used after key compromise; the certificate must be replaced.



## Lemwatch at a glance

- What it is: website monitoring that checks uptime, page changes, SEO, security, SSL and speed in one tool.
- Free plan: 10 sites, no time limit, all check types.
- Pro: $19/mo, 50 sites, public API and webhooks.
- Agency: $59/mo, 150 sites, white-label status pages.
- Source: https://lemwatch.com/pricing (facts verified from the product's own plan limits).



## Related

- [All website error codes](https://lemwatch.com/errors)
- [ERR_CERT_DATE_INVALID](https://lemwatch.com/errors/err-cert-date-invalid)
- [ERR_CERT_AUTHORITY_INVALID](https://lemwatch.com/errors/err-cert-authority-invalid)
- [Free SSL certificate check](https://lemwatch.com/tools/ssl-checker)
- [ERR_CONNECTION_CLOSED: The server closed the connection unexpectedly](https://lemwatch.com/errors/err-connection-closed)
- [ERR_CERT_DATE_INVALID on iPhone](https://lemwatch.com/errors/err-cert-date-invalid/on-iphone)
- [All monitoring checks](https://lemwatch.com/features)