Certificate has been revoked
ERR_CERT_REVOKEDThe certificate authority pulled this certificate back before its expiry date, so the browser refuses to trust it.
What it means
Certificates can be cancelled before they expire. When that happens, the issuing CA publishes the revocation, and browsers that check it will block the certificate with ERR_CERT_REVOKED. Revocation is a deliberate act, usually because the private key was exposed, the certificate was issued in error, or the domain changed hands. A revoked certificate can't be un-revoked; the site needs a fresh one.
When it happens
You'll hit this if a key was compromised and the cert was revoked in response, if the CA revoked it for a policy or mis-issuance reason, or if an old certificate was deliberately killed during a security incident and is somehow still being served. It can also surface briefly during a sloppy migration where the revoked cert wasn't swapped out everywhere.
How to fix it
- Treat a revocation as a security event first: if the private key may have leaked, rotate it and investigate before anything else.
- Request a brand-new certificate with a new key pair from your CA, then install it on every server and endpoint that was serving the old one.
- Remove the revoked certificate completely so nothing falls back to it, including CDNs and load balancers.
- Verify the live certificate after deployment to make sure the revoked one is gone from every path.
Check this site’s certificate
Paste the domain and Sitewell shows the certificate’s expiry, the hostnames it covers, the chain, and the issuer — enough to pin down what triggered this error. Free, no signup.
Related errors
NET::ERR_CERT_DATE_INVALIDThe certificate's validity dates don't line up with the current time, usually because it expired or the device clock is wrong.
NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIREDThe certificate isn't backed by the public Certificate Transparency logs the browser now requires.
NET::ERR_CERT_AUTHORITY_INVALIDThe browser can't trace the certificate back to a trusted authority, which is what happens with self-signed certs or a missing intermediate.