"The server's security certificate is revoked"

A mistake by our domain registrar (GoDaddy) revoked our site's live SSL certificate. This interrupted our SSL service around 11 am Wednesday 15 August 2012 for a few hours. We worked hard on this with them and others to get it resolved.

There was nothing wrong with the old certificate or the new one.

If you're still seeing a security certificate error, your browser or proxy server certificate cache (on your Internet connection) is using the old certificate. All it needs to do is re-check the certificate status (flush the cached certificate).

To work around this until it resolves itself for your browser or proxy, you can turn off your browser checking for revoked certificates:

In Chrome:

  1. Click the wrench at upper right.
  2. Click Settings
  3. Scroll to bottom and click Show Advanced Settings.
  4. Scroll down to HTTPS/SSL and uncheck the box "Check for server certificate revokation."

Re-check that box in a few days after your browser certificate cache is cleared. You may need to exit and restart your browser or computer to get it to flush.

In IE 8/9:

  1. Click the Tools icon, Internet Options, Content tab.
  2. Under Certificates, click Clear SSL State. This will flush the SSL cache.
  3. Click OK to exit,
  4. Next, click the Advanced tab, then scroll down to Security section.
  5. Uncheck the "Check for server certificate revocation" option.
  6. Click OK at the bottom of the window.

Is It Safe?

it turns out that certificate revocation checking is only a nuisance in most cases. See this article for an interesting explanation: http://www.imperialviolet.org/2012/02/05/crlsets.html

Again, we are very sorry anyone experienced this issue!

Related Article on Microsoft Site: http://answers.microsoft.com/en-us/ie/forum/ie8-windows_other/ssl-certificate-caching-problem/c5a819e2-df9c-4394-b7b4-ad66655820f8

Donedesk Support Team

Feedback and Knowledge Base